In my case, the root certificate is already installed, but I get error from the sandbox environment: "reason":"BadCertificateEnvironment". What could be the reason for that? I have found that this response corresponds to "The client certificate is forthe wrong environment.", but there weren't an option to set environment on "https://identity.apple.com/pushcert/".