Solve this problem
On the client side:
1 - Using Internet explorer 8
2 - Import and install, CA Certificate Chain
3 - Import and install, Certificate Revocation List
On the server side:
After approve an application for registration certificate
Update Certificate Revocation List (CRL)