You must have the complete certificate chain. This includes, at a minimum, the CA root certificate, and possibly the CA intermediate and server certificates. If you do not have the complete certificate chain, the import of the server certificate fails.