thanks for the explanation, it helped me to get the main point .but for who like have less information about Certificates I want to add some points for solving or understanding the problem.

OfflineRevocation says that the production server thinks that the certificate revocation server is offline, for my case it was because the access to the URL required windows authentication and it denied.

to easily check the access URLs in certificate detail tab should be checked. URLs in AIA for example.

- copy it in browser of production server to check if it has access.

- or write this command in command prompt:

certutil -URL http://crl.url.com/certname.crt

if there is no access problem, the cert is downloaded in browser.