Microsoft® Certificate Server registers users for services on the Internet by following these conditions:
Receives certificate requests and issues completed certificates over HTTP.
Checks information in a certificate request against an external database.
Optionally defers completion of the request process so the customer can be personally contacted for verification.
This set of conditions comprise a typical offline approval policy that would be appropriate when there is need for a high degree of user validation.