Apple told developers that the server certificate of Apple’s push notification service was updated, starting from March 29, 2021.
HTTP/2 based on tokens and certificates and connected to Apple’s push notification service must incorporate a new root certificate ( AAACertificateServices 5/12/2020 ) to replace the old GeoTrust Global CA root certificate.
Apple reminds developers that to ensure a seamless transition and avoid push notification failures, please confirm before March 29 whether the trust store of each notification server includes the old and new root certificates of the HTTP/2 interface.
It should be noted that the SSL provider certificate of Apple Push Notification Service issued by Apple does not currently require to be updated.
(Source)