That's... Really odd.
The date stamp being today and it signed by Cisco makes it almost certainly edge decryption/monitoring.
Does it also not happen for smaller, less known sites? When you say no other sites had problrms, do you mean banks and "big" sites?
Hotels can configure interception on a site by site basis, and it's possible all the other sites you tried don't get intercepted?
Unlikely, but only explanation I can think of