| Configure Samsung Android Workspace to enable CRL checking for all apps. |
On the MDM console, for the Workspace, in the "Knox certificate" group, configure "revocation check" to "enable for all apps".
Refer to the MDM documentation to determine how to configure revocation checking to "enable for all apps". Some may, for example, allow a wildcard string: "*" (asterisk).