Hi Manish,
we hade the same problem. The Android Certificate need a special value in it and fixed it with this:
First step is to reconstruct the PEM CA certificate:
Create a text file called Android.txt containing this single line: basicConstraints=CA:true
Then issue this openssl command:
openssl x509 -days 3650 -in server-cert.pem -signkey server-key.pem -extfile android.txt -out server-cert.pem.crt
Second step is to convert the PEM (ASCII) certificate to DER (Binary) format.
Do this by issuing this command:
openssl x509 -inform PEM -outform DER -in server-cert.pem.crt -out AgentryTrustedCertificate.der.crt
You will now have a new client certificate called CAcert.der.crt, which can be imported into the Android certificate store.
Try it out!
André