Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to install an application on a machine running Windows XP Pro.

There are two different servers being contacted, both using the same wildcard certificate (GoDaddy). One via https, one via net.tcp with ssl. Both are WCF services.

The first (via https) worked fine from the beginning. The TCP connection, however, fails with the error message "The revocation function was unable to check revocation because the revocation server was offline"

We got the IT guy to temporarily disable the proxy, and the TCP connection was successful, but he can't leave it off forever and we need to figure out what revocation server is being used.

According to this article on GoDaddy's support site (, you need to have one of these open for the revocation check to succeed:


We can ping them all just fine with the proxy running, but the TCP connection doesn't work.

How do I troubleshoot this? Is there a good way to figure out what CRL the app is attempting to contact?

share|improve this question

Open the site in your browser, open the View Certificate (usually clicking the Lock icon or similar, varies by browser). Details tab, CRL Distribution Points should be in the list with the URL(s).

share|improve this answer

Another option is to clear out the url cache in certutil and check it again after you've made a successful connection:

certutil -URLcache * delete

and then

certutil -URLcache

If you're running XP, then you might need to install certutil first:

share|improve this answer

Agree with Chris S. But also, to actually watch what it's contacting, fire up Microsoft's Process Monitor and turn off everything apart from network monitoring.

share|improve this answer

With regard to your underlying problem, it's worth checking the proxy is correct for WinHttp, as it can have different settings than those used by a browser.

On XP:


On Vista/7:

netsh winhttp show proxy

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.