Using intermediate cfssl certs with windows results in crl problems

Hello,

I "want" to use the cfssl generated certificates for webserver client authentication with the iis. At first everything seemed to work fine. I created a root key and cert on another system. Created the intermediate ca files and started cfssl with postgres.
The Problem I am facing now is that windows wants to recurse the whole cert tree to test for crl verification. Without the root and intermediate certificate installed on the windows system, certutil verifies the crl as type base crl but ocsp fails.
With the certificates installed crl verification fails with "wrong issuer" and ocsp verifies fine.
Is there a possibility to generate certificates with multiple crl-urls or change the type of crl in the certificate?

Kind Regards