It’s complicated, error prone and people will shoot themself in the foot

Because the current error dialog lets us only show one error, the only allowed tls error where a connect is still possible is EXPIRED.

For UNKNOWN_CA there is still the possibility to mark the certificate as trusted, so it’s not considered a tls error on next connect.

Fixes #10208

Fixes #10192

Fixes #10200

This is in preparation of migrating the config module

If at all this needs to be reimplemented with libsoup

when new config is generated

Presets can be used instead

Fixes #10201

- Hide update check on linux
- Remove Windows only tooltip
- Change order of elements