A padlock is not a promise. See what your TLS actually does.
Which protocols and ciphers your host still accepts, how its certificate chain is built, when it expires — and the change that closes each gap.
Check something else next
The other modules look at the same target from a different angle.