I’ve no direct experience but I believe you’ll need to establish the server side in a reverse proxy in nginx.
In the Android app there is a place to add the client certificate.
There is a tutorial at Using NGINX Reverse Proxy for client certificate authentication - start discussion