As of Chrome 58 released yesterday, certificates must have a "Subject Alternative Name".
If your organisation is using a self signed certificate with CA PPM, there's a good chance it doesn't have it.
The user will be presented with this warning.
- replace certificate
- Temp fix till 65: add a reg key to users machines Policy List - The Chromium Projects
Hopefully the information saves you some pain this Friday!