If you are using Intune to manage the device, please create a new configuration policy for a trusted iOS root certificate that points to the intermediate certification authorities' *. CER file.
Then, open the company portal on the device and update the policy.
The connection should now be successful.