EAP-TTLS and CA certificates on Android when connecting to WPA2 Enterprise WiFi

Question

I am setting up a WPA2 Enterprise-secured Wifi for my company. I set up a RADIUS server (FreeRadius) which talks to our Azure AD for authenticating our users. Because of the