A — PQC key exchange, TLS 1.3, nothing weak. Only quantum-safe signatures remain to come.
B — PQC key exchange is on. The certificate is still RSA/ECDSA, which is normal today.
C — TLS 1.3 but classical key exchange only. Recorded traffic could be decrypted later.
D — No TLS 1.3, so post-quantum key exchange is impossible.
F — Weak today: old TLS versions, broken ciphers or hashes.