You need to reduce the time that it takes for client computers to find out about certificate revocations and to process certificate revocation information