If I run an audit on my sites with Google Chrome, I get this message in the Leverage browser caching section:
The following resources are missing
The problem is the "must-revalidate" part of your cache-control directive. Get rid of that, and you should be good to go.