windows phone needs CRLDP or it wont validate the cert and will fail the connection.

...o validate a RADIUS cert

after debugging with eduroam members, Windows Phone needs CRLDP
attribute in the RADIUS/CA vert or its not happy and refuses the
connection.