Add an option to disable certificate revocation checking

[CFW.TN]

Disabling checking for certificate revocation is not available in CIS / CFW.

[Citizen_K]

I am linking to a discussion in the bug board about this:

@EricJH post:42

I am going to be the devil’s advocate here and argue why there is a case in not using OSCP when there is no network connection like there was in v10 and v11.

I start from the assumption that a system is clean once CIS is installed and that the various layers of self protection keep the system clean. So, in the case there is no network connection we can safely assume that an executable that is deemed Safe in the Safe list has not been tampered with and is the original executable and therefor does not need OSCP check.

Even though an internet connection is ubiquitous there are still situations where systems may run offline.

Therefor I think the users have a valid case to ask for an option to disable OSCP check either in general or only when there is no internet connection. The self protection of CIS is strong enough to mitigate for the minor loss of security.

@EricJH post:44

I would like to further argue in favor because CIS is also and from its foundation a tool that caters to power users. It is OK to have OSCP enabled by default for the mainstream use patterns but it should have the option to disable it given its dual nature.