Hi Jaroslav,OK, we've managed to sort it in our environment.The main issue turned out to be that we had spaces in the name (CN) of the CA, which in turn put spaces in the path/URL for the CRL.It looks like the CRL validation in LiveCyle doesn't properly escape the spaces (as %20) and so it is unable...

Hey Jaroslav,did you ever resolve this?  I'm now seeing the same thing, though with HTTP!At first I thought it was my aging WinNT4.0 CA that was the issue, but now it's started happening to my Win2003R2 CA as well.ThanksCraig