It is an do I trust you situation. First, when you request a web page the web server will send a certificate, your browser will check to see if that cert is trusted. If so, the web server will send a signed cert and then an encrypted session can be had. TLS works at the transport layer and is essentially a key exchange to begin or resume a secure session.