What do you mean by ****** in Apple’s system do not support modern ****** in PKCS#12 ?

@ohadshulz were you able to do anything about it? As prompted by @eskimo I started looking into this in more detail and so far found that on the device the offending signatures seem to check out fine, but the server nevertheless complains.