I was only OCSP URL configured, today I Added the CRL URL and begins work perfectly.
the question is... why doesn't work with OCSP ?
the official documentation say
BlackBerry® solutions can use either the OCSP server or the certificate revocation list, or both, to fetch the status of an S/MIME certificate. |
Note: If an OCSP server is available in the environment, do not use the certificate revocation list to fetch certificate status.