Mutual TLS is enabled but the CRL endpoint is unreachable and only strict clients reject the server

Certificates are otherwise valid, but some clients fail because they require revocation checking and the CRL distribution path is no longer reachable.