[everybodyknows]

TL;DR: "Padlock" means the usual icon promising the site has a valid TLS cert.

But well worth skimming through for the excellent Firefox about.config tweak "network.IDN_show_punycode".