Solved by using OIDC instead of TLS certificates. See here: How to access Incus WebUI from iOS devices? (2026 edition)