Ok, I was able to add/find/delete if I use kSecAttrLabel. It doesn't like me passing attribute kSecAttrApplicationTag, or kSecAttrApplicationLabel. You had mentioned I should be using kSecAttrApplicationTag.
At least it's working on iOS.
Still can't get the SecPKCS12Import to work on macOS though so I'm still stuck there.