We use client side Cloudflare certificate to allow or disallow access to our site since the site is meant to be used by a small group of users who are provided a Cloudflare client certificate.
Our firewall blocks all requests from clients/browsers that do not have the certificate.
We are not using the certificate on a server - just on client side for the browser to pass to the server to identify the client.
The same certificate works on desktop browsers but some ios devices (iphone) are unable to use the certificate citing the error “The authenticity of “Cloudflare” cannot be verified”. This error comes when installing the profile. And of course the browser cannot access the site since there is no exchange of client certificate during the handshake.
On the internet we found suggestions to manually enable trust for the installed certificate BUT in our case we do not see out certificate listed there in order to toggle the trust setting there.