Hi Jaroslav,
OK, we've managed to sort it in our environment.
The main issue turned out to be that we had spaces in the name (CN) of the CA, which in turn put spaces in the path/URL for the CRL.
It looks like the CRL validation in LiveCyle doesn't properly escape the spaces (as %20) and so it is unable to download the CRL.
Depending on your environment, you may also need to check that the LiveCycle server can connect to the location of the CRL via HTTP.
We've got a firewall in the way which caused a secondary problem for us.
Hope that helps.
Regards
Craig
BTW Big ups to Uday at Adobe Support for getting me to the point where I was able to resolve this.