SEC_TLS_CERT_TRUSTED
Completes a real TLS handshake and checks whether the presented certificate chain validates against the system trust store. A chain that does not validate produces a full-page browser interstitial - the single most damaging thing that can happen to a page, and one no response-header check can detect.
Impact is importance multiplied by the confidence tier’s weight — SPECIFICATION 1.0, RESEARCH 0.7, EMERGING 0.3, EXPERIMENTAL 0.1. Two rules backed by the same class of evidence therefore always carry the same weight, which is what makes the score reproducible rather than hand-tuned.