Basic indicators
The audit checks whether a certificate exists, validity dates, issuer and general HTTPS signals.
A valid certificate does not guarantee the whole app is secure, but it is a minimum baseline for internet operation.
Common risks
Forgotten expirations, certificates for another domain, incomplete chains or mixed HTTP/HTTPS configurations cause visible user errors.