Expired ssl certificate?

Question

IIS

Good afternoon, the situation is actually as follows: there is an https handler, at some point in time its certificate expired, but during the rest of the day, work on https did not stop, and the handler still successfully processed requests. And so now also it is not clear how the expired certificate is cached (or processed) in IIS 7.0 <? Maybe it has something to do with this that this handler is brought out of the network through TMG? Maybe it's tmg somehow caches the certificate?

Answer 1

If my memory serves me, then the default values ​​in Windows Server are:
1. publishing a basic CRL - once a week
2. publishing an incremental CRL - once a day.
Verification of certificates most often takes place on the CRL.