Permit trailing data after PKCS12 on iOS

src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/X509Certificates/AppleCertificatePal.ImportExport.iOS.cs

@@ -22,7 +22,9 @@ private static bool IsPkcs12(ReadOnlySpan<byte> rawData)
                     {
                         using (var manager = new PointerMemoryManager<byte>(pin, rawData.Length))
                         {
-                            PfxAsn.Decode(manager.Memory, AsnEncodingRules.BER);
+                            // Permit trailing data after the PKCS12.
+                            AsnValueReader reader = new AsnValueReader(rawData, AsnEncodingRules.BER);
+                            PfxAsn.Decode(ref reader, manager.Memory, out _);
                         }
 
                         return true;

src/libraries/System.Security.Cryptography/tests/X509Certificates/PfxIterationCountTests.cs

@@ -130,7 +130,6 @@ public void ExportedPfxWithNullPassword_DecryptReturnsValidPaddingWithEmptyPassw
         }
 
         [Fact]
-        [ActiveIssue("https://github.com/dotnet/runtime/issues/88050", TestPlatforms.iOS | TestPlatforms.tvOS | TestPlatforms.MacCatalyst)]
         public void Import_BlobHasMoreThanOnePfx_LoadsOnlyOne()
         {
             // These certs don't use PBES2 so they should be supported everywhere.