I have a .net desktop application without a certificate on a network not connected to the Internet

When I start it, there is a call to crl.microsoft.com that times out and slows down the application.

I know I can put

    <generatePublisherEvidence enabled="false" />

to skip the check, but I'm curious to know what triggers this check and which certificate does it want to check? Is there a way to "sniff" that information?

  • I'm sure there is a trace provider that will allow you to "sniff" that. Possibly under the WIF or IIS types? Sep 17, 2015 at 14:02

1 Answer 1


This MSDN blog may help you

One way of doing this is listed below, but others are on the blog

REGISTRY  : HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\SslBindingInfo 
DWORD    : DefaultSslCertCheckMode 
Value         : 1
  • my .net application is a desktop one, this msdn link talk about IIS, i'm going to try it but i'm sure it wont work
    – Fredou
    Sep 17, 2015 at 14:38

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .