Are you testing this while connected to the Guest SSID?
If you test the login from the Central Dashboard preview, it is expected to fail like you describe as your traffic has to flow through the AP in captive portal mode. securelogin.hpe.com is the aruba_default certificate that is pushed to your AP by Central.