Inspect the connection separately from the business
Read the actual hostname and scheme locally, then inspect certificate details in your browser when a live visit is appropriate. The string https does not verify the certificate chain, expiry, hostname match or business legitimacy. This tool leaves each of those live facts unchecked.
Certificate and registration evidence
If the browser reports a certificate error, stop sensitive actions and escalate it rather than bypassing the warning. Record the exact hostname, date and browser message. Domain registration information can be incomplete or privacy-redacted. A recently registered legitimate domain and an old compromised domain both require context.
Worked evidence record
For a fictional supplier.example, the local record shows HTTPS as the requested scheme. Certificate validity, registry details and current reputation remain unknown until an authorised reviewer records separate evidence. Do not convert those unknowns into a green pass.