Я думаю, что раздел объема документации объясняет это подробно.
Either:
By default MS CAs are configured to publish CRLs only to AD, which is not accessible from the outside world. MSTSC 6.0+ will return this error if they can't get the CRL and a URL is specified.