Do not do Expect-Staple when OCSPVerifyResult has not been populated

The OCSPVerifyResult is not always populated on a connection, for example
when a certificate error has been bypassed. This CL adds a new response
status that allows us to distinguish whether or not OCSP details have been
checked on the connection, and we no longer send reports when they haven't
been checked.

This CL also adds a test that reports are not sent when there is a
certificate error, as is the case when first encountering a cert error,
before it has been bypassed.

BUG=654127

Review-Url: https://codereview.chromium.org/2587243002
Cr-Commit-Position: refs/heads/master@{#440547}
3 files changed