Hi BruceLevenbergGlobal,
Here is something I found in knowledge base that might solve the problem in regard to CRL download failure error, it's highly recommended to perform below procedure in TAC engineer's guidance.
It is necessary to add certificate with "Enable Fetching of CRL" under HTTPS Certificate for the CRL download to work. Has this been enabled? If not please follow the following configuration:
-->Before doing this, are you using this feature?
Procedure to Enable Fetching of CRL:
Step 1 Choose System > Configuration.
Step 2 Click HTTPS Certificate.
Step 3 Choose Enable User Certificates. If prompted, select the appropriate certificate from the drop-down list.
Step 4 If you want to retrieve the CRL, choose Enable Fetching of CRL.
Step 5 Enter a valid URL to an existing CRL file and click Refresh CRL. The current CRL at the supplied URL loads to the server.
-->Note :
Enabling fetching of the CRL creates a scheduled task to update the CRL on a regular basis. Edit the task to set the frequency of the update.
Step 6 Verify that you have a valid user certificate generated by the same certificate authority that created the server certificate.
-->Caution:
If you save a configuration with enabled user certificates, but you do not have a valid user certificate in your browser certificate store, you disable all web server access to the appliance. Make sure you have a valid certificate installed before saving settings.
Step 7 Click Save.
