Two error - certificate validation operation took X milliseconds & Alternate access mappings have not been configured

Question

Dear all,
I have two questions on my SP2013 standard (on premise). They are very usual and I can find lots of work around and resolutino on web. But I cannot fix my environment and I am looking for more detail explaination if possible.
At the beginning, I found there are lots of Critical error log in my SP App server every 1-2 minutes:
A certificate validation operation took X milliseconds and has exceeded the execution time threshold. If this continues to occur, it may represent a configuration issue.
My system doesn't have Internet access. After some research it happened to be SharePoint certificate CRL checking issue:
http://support.microsoft.com/kb/2625048/en-us
I applied BOTH resolustion but the error still throw.
After more research, it seems Sharepoint will keep looking for
http://crl.microsoft.com. Some discussion suggested to add a HOSTS line "127.0.0.1     crl.microsoft.com". I have added the line and now I see a new warning log:
Alternate access mappings have not been configured.  Users or services are accessing the site
http://domain.com with the URL
http://127.0.0.1.  This may cause incorrect links to be stored or returned to users.  If this is expected, add the URL http://127.0.0.1 as an AAM response URL.
I guess Sharepoint is trying to contact http://crl.microsoft.com to retrieve the crl. How can I resolve both error? Why Microsoft have this design knowing that many Sharepoint site are sit within Intranet?
Thanks a lot.
Mark

Answer 1

Anything in the CAPI log?  It shouldn't be going to the internet anymore.
Do you have loopback disabled?
http://blogs.technet.com/b/sharepoint_foxhole/archive/2010/06/21/disableloopbackcheck-lets-do-it-the-right-way.aspx