Using ISE 2.1 patch 3, I have a CRL with spaces tried both https and http and the correct permissions are on the url, full accessible with domain and non-domain workstations/accounts http://pki.companyname.com/pki2016/company%20name%20PKI-PROD%20Iss...