the problem obviously is in ca.pem. Is the file readable to AOLserver? Is it a valid CA certificate? Maybe you can post it here?
/Bart