Install this to your Home Screen first (Share → Add to Home Screen), then open it FROM the home screen icon before doing anything below — push subscriptions and passkeys both require standalone mode on iOS.
Install the profile first: push-test-mtls.mobileconfig (Settings → Profile Downloaded → Install). Then tap below — the fetch is issued from inside the service worker, not this page, since that's the specific uncertainty.