I have now upgraded to 2.0RC2, and a month has passed, which means the CRL has expired once. I did not see a recurrence of the failure. So, either the bug is fixed in 2.0RC2 or else the failure is intermittent. I’ll assume the bug is fixed, but I’ll report back again if it returns.