025EA162 Unable to decode X.509 certificate revocation list.

Explanation
Certificate management services is unable to decode
an X.509 certificate revocation list (CRL).  Additional information
for the error error can be obtained by turning on debug messages for
subcomponent KRB_GSSAPI.

User response
Ensure that the LDAP entry for the certification
authority contains a valid CRL.  Contact your service representative
if the error persists.