iOS - how to get mail app to recognize and trust custom or self-signed SSL certificates from a profile?
In addition to the root certificate you will in some instances also need to add the intermediate certificate in case the mail server you're connecting to does not present the full certificate chain.

You can download the intermediate certificate here:

http://www.cacert.org/?id=3