The validity check on authentication certificates is performed by querying an issuing CA.
To create a trusted Public Key Infrastructure (PKI) needed to validate certificates, complex relationships are formed by cross-certification among CAs or by use of PKI bridges.