The purpose of online validation is to check if the person applying for a certificate has the right to request a certificate for the domain. RapidSSL does online validation by sending an email to a generic administrative address at the domain. This email needs to be approved by the domain owner.