The certificate a server actually presents: issuer, validity, the names on it, and whether it matches the host you asked for. The chain itself is not validated — showing an expired or self-signed certificate is the point — so those three browser checks are computed separately and shown as badges.
Expiry, whether it is valid yet, whether the hostname you asked for is on the certificate, and whether it is self-signed. Protocol, cipher, ALPN, serial and chain length are reported as they were presented, not as they should have been.
More tools: all network tools · DNS records · HTTP headers · TLS certificate · API · badge · ad & analytics checker · traceroute globe.