Why should the layman care about how HTTPS works ?
In particular the statement "They confirm the identity of the certificate owner & provide proof that a certificate is valid. " is dangerously misleading for the "layman" as the basic HTTPS certificate issuance does not involve any sort of owner identity confirmation, just that whoever requested the certificate had control of the DNS record for that domain at the time of the request.