This explainer is interactive and needs JavaScript. It covers how certificates let a browser check that a server really is the site named in the address bar.