First of all, I might be wrong about all of this. I'm a total noob. I think there seemingly are 2 kinds of cert checks. A- Browser based B- Windows (operating system) based 1- For A's certificates to be updated, does that browser make that connection or does it use a windows service for updating? 2- For B, I think it checks certificates when you start an installer like "CCleaner Setup", see here "Windows Explorer"(Not Internet Explorer) made connections, it sure seems certificate related https://s15.postimg.org/eux7zqpff/Winexplorer_phoning.jpg But Windows Explorer also made other connections, are those also cert updates? see here: https://s21.postimg.org/cqjfm3z9j/Windows_explorer_connects.jpg I'd like to only use Windows Explorer for what it is, browsing my files. What are those connections and how do I disable them? (Other than blocking with firewall) Edit: I think I've found "Cryptographic Services" making that akamai connections. Screenshot: https://postimg.org/image/4p1urdaz1/d94bc54c/ So which one is checking for certs? Svchost or Windows explorer or both? What is the disabling method of cert update checks for B ?