| Configure Samsung Android to enable CRL checking for all apps. |
On the MDM console, for the device, in the "Knox certificate" group, configure "revocation check" to "enable for all apps".
Refer to the MDM documentation to determine how to configure revocation checking to "enable for all apps". Some may, for example, allow a wildcard string: "*" (asterisk).