We connect to your site over HTTPS, read the certificate, and report the issuer, validity dates, and which hostnames it covers.
