TLS certificates, actually explained, no hand-waving

Most developers use TLS constantly and understand it vaguely, "it's the padlock, it means encrypted,"...