Erwann Abalea eabalea@gmail.com wrote:
It considers that the CRL found at "hash".r0 isn't valid or sufficient to give a revocation status of your certificate. Could you post the subscriber certificate, its issuing CA cert, and the corresponding CRL somewhere?
I found the problem: it was not signed by the right CA (same private key, different cert)