I am currently developing an app, where the user himself provides a data endpoint, that should send a push notification to his device, if this endpoint receives values higher than a specified number. The push registration takes place on his server as well as the sending of the notification. Since the certificate for sending these notifications is required to be bound to the app directly, the only way of doing this without hosting some type of middleware for notifications (which I would like to avoid), is by making the certitificate public. Is it generally allowed to do such thing and will my app stil be accepted to the AppStore if it is public?