https://bugs.winehq.org/show_bug.cgi?id=56559
--- Comment #1 from Hans Leidekker hans@meelstraat.net --- The launcher passes CERT_CHAIN_REVOCATION_CHECK_CACHE_ONLY which means the revocation check will fail if the CRLs it needs are not cached.
If you run these commands first:
$ wine iexplore http://x1.c.lencr.org/ $ wine iexplore http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
the launcher proceeds to download the file. Since these are popular certificate authorities, chances are that these CRLs are already cached on Windows.