Diagnosing certificate-expired, hostname-mismatch, and incomplete-chain TLS errors. Each entry explains the cause, which clients are affected, and how to fix it.