Hi,

thanks for your questions. When you don’t set any Certificate Validator, all certificates are indeed accepted directly without checking or storing them anywhere.

Java SDK includes a DefaultCertificateValidator that you can use for default Certificate Validation. It includes another concept, a DefaultCertificateValidatorListener interface, where you can implement what to do with Certificate Validation results. See sample class MyCertificateValidationListener for an example. If you don’t set any DefaultCertificateValidatorListener, the Certificate will be judged by the Certificate Checks that it has passed or failed, resulting in rejecting or permanently accepting the Certificate.