When revocation checking is turned on, the digital IDs of secure messages you receive are checked when you open them (as long as you are online). A message is automatically sent to the certification authority requesting information on the digital ID used for the message.