TLS certificates, actually explained, no hand-waving

Most developers use TLS constantly and understand it vaguely, "it's the padlock, it means encrypted," without a clear picture of what's actually happening or, more usefully, what actually breaks and w...