Tag Archives: revocation

Windows automatically caches retrieved CRLs and OCSP reponses. The advantage is that it speeds up revocation checking and uses less network bandwidth. The disadvantage is that clients will not detect new CRLs until the local cache expires. Normally you should … Continue reading →