Please be sure to search for prior relevant posts. By default, apps on Android 7+ do not allow user-specified CAs. There is an ongoing discussion about this at Odk Collect with Custom Certificate: Android 5 (works), Android 7,8 (fails)
Please note that this is based off of an ODK Collect version from 2015 and is not supported by the ODK community.