A browser validates a server certificate before sending a password over TLS. What does validation help establish?

1. That the website has no business-logic flaws
2. That every server administrator is trustworthy
3. The authenticated identity associated with the server
4. That no endpoint malware exists