Apple makes this far more difficult than it should be:
My-CA.pem to the iOS device through iCloud, AirDrop, or a direct download from your server.Profile Downloaded item will be at the top. If it is not there, you may find it in General → VPN & Device Management.Install.Install again.Install twice wasn’t enough, a confirmation button will appear at the bottom of the screen. Click Install one last time.