As Apple announced today: iOS 13 will tighten its requirements on TLS server certificates.
Without having an actual iOS 13 device to play with, I can say that certificates you create with Apache httpd and its mod_md domain mangement from the nice people and machines at Let’s Encrypt meet all mentioned criteria.
Cheers, Stefan