Delete the CRL Cache to Avoid Slow Logins

A Certificate Revocation List (CRL) is a list of revoked public key certificates created and digitally signed by a Certification Authority (CA). Over time, your organizations CRL can contain old and expired CRLs which can slow down the login process as each are contacted to validate a certificate.

Instructions

Clear the local CRL and OCSP caches on Microsoft Windows (7 or newer). Open a command prompt or and type the following:

certutil -urlcache * delete

To only delete the CRL cache, type the following:

certutil -urlcache crl delete