Cirrus(This is not a full answer to all your questions, but may be helpful)
If you do a sessiondump on the session and grep for crldp
sessiondump a834f3e | grep crldp
you will see some entries like:
a834f3e.session.crldp.last.result a834f3e.session.crldp.last.status
An easy way to check them in testing is set a Message Box item after the CRLDP object so your policy doesn't finish and while you are sitting on the Message Box check the variables in the command line.
Once you know how the variables are set you can use the "Empty" VPE object and set your own custom branching rules based on those values.
