A service responds on TCP port 8443 with an HTTPS certificate and HTTP headers. What is the best interpretation?

1. The service must be SSH because the port is above 1024
2. The service cannot use encryption on that port
3. A web service is likely present, and its identity should be validated beyond the port number
4. The certificate proves the application has no vulnerabilities