Verify a server's SSL/TLS certificate: trust chain, expiry, hostname match, and missing intermediates.