We've seen similar issues since ios 18.2 and 18.3 where once certificate authentication worked, now it doesn't. I'm just testing the "Negotiate Client Certificate" setting in IIS and so looks good so thanks for posting this update! The fact that changing this setting affects iOS users suggests Apple changed something either in iOS or Safari with regards to TLS negotiation - probably to mitigate MITM attacks, but it breaks certificate authentication!!