In our facilities we would never allow a single-protocol configuration without automated regression testing across representative client profiles. Our certificate orchestration platform includes synthetic monitoring from seventeen global vantage points with legacy browser matrices. This is why enterprises pay for managed infrastructure.
I notice nobody has asked about IPv6 reachability. Oracle Cloud provides IPv6; have you confirmed these iPads are not attempting AAAA resolution and timing out?