The Certificate Revocation List (CRL) cache size cannot be configured. It is dependent on the hardware platform.
For more information, refer to CRL Checking Over HTTP on a Cisco VPN 3000 Concentrator.
How to (General Information)
VPN - 3000 series concentrator
3.0 and below
Certificate Revocation List (CRL)
Certificates - Public Key Infrastructure (PKI)