I think you got it, ran into a similar chrome issue at work a few months back with some sites that were on sub domains.
Would have to dig thru some change logs as I didn't fix it - from what I recall it was a combo of the SSL cert and how the cookie set a same-site attribute.