Testing TLS and Certificates 

This article explains how TLS and X.509 certificates establish server identity, the role of certificate authorities and intermediate chains, and why testing TLS by IP address leads to trust failures. It distinguishes identity verification from encryption, outlines the TLS handshake and key exchange, and highlights common pitfalls such as self-signed certificates, missing intermediates, and misconceptions about certificates dictating encryption algorithms.