1. Test it with Android 5+ device.
2. Android 4.4, especially without Google services are very rare devices. I'm not sure that it is worth the efforts to try and deal with such devices.
You might be able to create a library that uses a custom TLSSocketFactory. However it will be difficult to combine it with OkHttp.