PKI Monitoring - CRLs current and not updated


Using the PKI Certificate management pack largely without issue - recently been asked to turn on the monitoring for the CRLs - has anyone tried this with any degree of success? I have 2x SCOM environments and it does not work in either it seems, happy to use some sort of Powershell alternative if someone has one: