My point was that the CA can't solve it for you, they can only give you APIs and processes with which you can solve it yourself.

If your webserver supports checking the certificate validity then it's not solved by the CA, it's been solved by the developers of that software and by you installing it.