RevocationFreshnessTime Metabase Property (IIS 6.0)
If the value of the CertCheckMode Metabase Property is set to MD_CERT_CHECK_REVOCATION_FRESHNESS_TIME, the client's CRL is replaced by the CRL on the CA, even if the CRL that is cached on the client is valid. The value of this metabase property, RevocationFreshnessTime, in seconds, determines the frequency of this action.
The freshness time for a CRL is the period of time for which it is valid. If you set this property to a very short period of time, IIS makes many requests for an updated CRL, which can cause network delays. Setting a longer period of time for the RevocationFreshnessTime metabase property is recommended.
You can configure this property at the following locations in the IIS metabase.
For general code examples, see Code Examples to Configure Metabase Properties.
For more information about certificate revocation and CRLs, see Revoking Certificates and Publishing CRLs.