Identitycrl: Registry

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\IdentityCRL

Many admins confuse the IdentityCRL registry with other Windows caches. Here is a quick comparison:

Examine each subkey. Look for binary values named CRL0 , CRL1 , etc. The NextUpdate value (if present in a human-readable format) shows when Windows will consider the cache stale.