Thanks for the quick and insightful answer @ChuckMN. I was hoping to get some kind of document specifically about push notification appliance. Currently we can only deduct the OS side encryption and tls communication are compliant. Not if the push notification endpoint is using certified tls.

@ChuckMN, great post! Thanks a lot for the guidance. I have already reviewed the old APNS document and found it very informative.