Should be fine, did you take out crloptional, and have published on
MS CA the CRL via LDAP? It is a configuration task on the MS CA to be
able to publish the CRL via LDAP, and this is the distribution point that the
CA server tells the Pix where to pick up the crl.
