A quick way to know is if youre running custom build kernel, or use mainline on ubuntu based systems, youre not using secure boot.
Those kernels are generally not signed and the cert is not added to the tpm to allow it. Youd have to have gone out of your way to do it, in which youd know secure boot was enabled :p