As discussed in https://developer.apple.com/videos/play/wwdc2016/724/ for APNs they offer JWT based auth as an alternative approach, instead of using their bogus certificates.