pfSense: OpenVPN stops accepting clients with 'CRL has expired'
Edit the CRL under System > Certificates > Certificate Revocation, set Lifetime 730 and save: it is regenerated with valid dates. On old versions, apply the ‘Fix for CRL expiration lifetime’ patch with System Patches first.