As is done on other platforms, if the SSL failure is only a name mismatch, we should check the certificate against the list of known Captive Portal certificates in order to more reliably detect if the user is behind a Captive Portal.

See ConfigSingleton::IsKnownCaptivePortalCert in ssl_error_handler:
https://cs.chromium.org/chromium/src/chrome/browser/ssl/ssl_error_handler.cc?sq=package:chromium&l=330