Hi Jaroslav,OK, we've managed to sort it in our environment.The main issue turned out to be that we had spaces in the name (CN) of the CA, which in turn put spaces in the path/URL for the CRL.It looks like the CRL validation in LiveCyle doesn't properly escape the spaces (as %20) and so it is unable...