Certificate, chain, TLS protocol matrix, DNS posture, and security header inspection — backed by AI analysis from an engineer with 11+ years of PKI experience.