The attribute name for "Certificate Revocation Lists" should be "certificateRevocationListFile", not "certificateRevocationFile". Log: [SetPropertiesRule]{Server/Service/Connector/SSLHostConfig} Setting property 'certificateRevocationFile' to 'path\ca.crl' did not find a matching property.
https://tomcat.apache.org/tomcat-8.5-doc/config/http.html#SSL_Support_-_SSLHostConfig
The fix will be in 9.0.9 and 8.5.32.