Expiry, issuer and whether it covers the name.
A full address works too; the domain is taken from it.
This check needs JavaScript. With it switched off, this tool cannot be used; the text tools on this site still work.