@ohadshulz were you able to do anything about it? As prompted by @eskimo I started looking into this in more detail and so far found that on the device the offending signatures seem to check out fine, but the server nevertheless complains.

What do you mean by ****** in Apple’s system do not support modern ****** in PKCS#12 ?