A site's HTTPS validity, issuer and expiry date.
An SSL/TLS certificate enables HTTPS (the padlock) and encrypts the connection. An expired certificate shows a security warning that drives visitors away. Watch the expiry date so you can renew in time.
Ideally 2 to 4 weeks before. Let's Encrypt certificates renew automatically every 90 days.