I am adding a 3rd party OCSP responder(Tumbleweed) plugin to IIS 6.0/Windows. I have the 3rd party tool configured to check the revocation status and would like to assert that IIS is not making a duplicate check. Is there a log (other than the IIS HTTP status code log) to help determine this? (It seems that Tumbleweed relies on the CertCheckMode property, so I can't just turn that off).
IIS6.0 doesn't support OCSP without a 3rd party OCSP client such as Tumbleweed, however, we can still check anyways! :)