In more detail
Website certificates (X.509) list the domain names they cover, the issuer, the validity dates and the public key, and are signed by a certificate authority that browsers trust, often through a chain of intermediate certificates. Expired, mismatched or untrusted certificates trigger browser warnings.