I was actually guess that your token was issued from a production cert, but the server has development cert (vice versa).
This does not work, per Apple.
When connection to PROD. APNs is establisehd they only allow PROD tokens - not development