Original fictional certificate cards. No certificate was fetched.
Do not click past a warning. Do not install a CA for this lesson.

Requested hostname: note.lab.invalid

Card A
Hostname on the certificate: note.lab.invalid
This card's fictional result: the name matches

Card B
Hostname on the certificate: other.lab.invalid
This card's fictional result: the name is different

Assume the other fictional trust checks pass; compare the requested name separately.
A local test CA would be a separate trust store from a public one.
This lesson does not create either store.
Check: card A matches the requested hostname.