The simplest fix is to try a different (ACME) CA for your certificates, one who's trusted root is available in the required versions of Android. I don't know which ones work where so you would need to test but, your choices include ZeroSSL, BuyPass Go and Google Trust Services