Teams directing routing CRL_FETCH_FAIL

[Joe_Tseng1]

I am config isr 4331 for MS Teams direct routing. after set crypto pki trustpoint baltimore and crypto pki authenticate BaltimoreCyberTrustRoot.crt.pem, Router shows 

%PKI-3-CRL_FETCH_FAIL: CRL fetch for trustpoint baltimore failed

Reason : Received 400 (Bad Request) from cdp :http://crl3.digicert.com/Omniroot2025.crl

or Anyone knows what this error mean?

where should I check? thx a lot.

Joe

[didierak]

This is a bug

The workaround is to  Disable revocation check under trustpoint with revocation-check none command.

Example:

sbc1(config)#crypto pki trustpoint Baltimore
sbc1(ca-trustpoint)# revocation-check none