MicrosoftHello Carsten,
Thank you for helping others. with this post.
If only customers would understand the impact the CRL (Certificate Revocation List) Certificate Revocation Check has on the start-up delay and performance of applications.
Especially if endpoints/clients are behind a proxy or web filter and are unable to reach the external CRL address, you may encounter a hanging/stalled application, slower application start-ups, or the hated blue loading wating mouse cursor circle.
Because we regularly encounter such problems at our Microsoft customers and have to report them almost monthly to the firewall or proxy teams, we have decided to develop a freeware tool crlcheck.exe that helps to verify the CRL address for each executable that runs on a Windows client.
This will help to identify the URL's that are blocked to external Certificate Providers and should be opened.
https://www.butsch.ch/post/crlcheck-exe-certificate-revocation-list-check-tool-to-verify-all-crl-and-ocsp-on-windows-client/
Greetings from Switzerland
