Instead of leaving the above mentioned tasks to individual applications, these different applications will ask one central service (validationserver) whether the certificates are valid or not.

The advantage of such an architecture is as follows:

• During  examination you have a consistent, central configurable procedure=> minimising interoperability problems
• standardised levels of validation and validation standards => consistent and central administrable subject to security regulations.
• standardised configuration of the confidence anchor=>
  easy exentsibility of a PKI

If these complex tasks of the applications are out sourced to a so called validation server resp. a "validation authority" the extensive  requirements  to such a central location are very high.

In oder to achieve the use for a great number of applications, the internet has formed a standardised planel called IETF in the PKIX-workforce in order to deal with these occuring problems.

The validationserver SyTrust CertControl does support these standards and therfore also a great number of applications. With ValidationWorks! all applications of a microsoft windows worklace are extendable and will be supported.