Chrome - stalling with Establising Secure Connection in the status bar

-exit Chrome, 


-stop CryptSvc from Task Manager> Services
-in regedit, go HKCU...ProtectedRoots - see full path above
-go up one level to ...SystemCertificates\Root
The Root steps are mostly optional and for documentation only.
export Root: do: right click Root, Export, choose file name... 
expand Certificates, stretch the left panel to the right to expose the cert IDs somewhat, 

      note the number of Certificates.  None is common and OK.
      take a screenshot, like this
    right click Root, go Permissions, then Advanced, save a snapshot


-right click ProtectedRoots, go Permissions, then Advanced

    if you get errors, take screenshots.  

    if you get:  error: incorrectly ordered,  do Reorder, then go Advanced
       and note the reordering for later.

    save a screenshot of Advanced,  like this

 -if ProtectedRoots is not owned by you or Admin -
     if it's owned by System (see screenshot above), 
  then change owner to you with:
  from Advanced, select Change, then Advanced (in Change), then Find Now
     select your name.  It should look like this:
  then OK out of Advanced Change, and OK out of Change




  in Advanced Permissions, enable Inheritance
     verify User (you) now have Full Control
     take a snapshot of Advanced Permissions with the new owner and Inheritance on
     OK out of Advanced Permissions and Permissions

-right click ProtectedRoots and delete - this will rebuild automatically later
     (This step is optional and only used to pretest the Root Delete)

     if you get: Error deleting keys,
       a) go back to Permissions> Advanced and verify owner is you with full control
       If not, redo the steps above to change owner and redo delete

       b) try: select: Replace all child object permission with inheritable...
       Apply, redo delete

       c) If it still fails, take a snapshot of the error and
       go to End & Send Feedback

-at ...SystemCertificates\Root - up one level
     If there are Certificates, check that you did the Root Export above
     right click Root, then Delete - this will rebuild automatically later

End & Send Feedback

-start CryptSvc from task manager> Services - this rebuilds the deleted items (keys)
-restart regedit, go  HKCU...ProtectedRoots, 
    verify ProtectedRoots [and Root] have been rebuilt
    verify ProtectedRoots Permissions> Advanced: Inheritance is off
       you have Read, CryptSvc has Full Control
       take a screenshot of the rebuilt Permissions Advanced
 -if there were certificates initially, restore with the earlier Root export
    stop CryptSvc,
    click on the Root export file to import;
        ignore errors related to open keys or no permission
     The import restarts CryptSvc, so no action needed.

Done!