Do I need to update the certificate of the APNs?

Currently, our provider server uses token-based authentication with APNs.

In addition, to establish a connection with APNs, we have installed the "AAACertificateServices 5/12/2020" certificate from the "Sectigo KnowledgeBase website" on the provider server.

Question 1

Do I need to update the server certificate of the Apple Push Notification Service at the following URL for the above provider server?

URL

https://developer.apple.com/jp/news/?id=09za8wzy

Question 2

If registration is required, how long will it be valid for?

Root certificate

https://developer.apple.com/documentation/usernotifications/setting-up-a-remote-notification-server

Token-based authentication

https://developer.apple.com/documentation/usernotifications/establishing-a-token-based-connection-to-apns

Question 1

Do I need to update the server certificate of the Apple Push Notification Service at the following URL for the above provider server?

URL

https://developer.apple.com/jp/news/?id=09za8wzy

Above was Japanese site. English site is here

https://developer.apple.com/news/?id=09za8wzy

Regarding the contents described here, does this mean that all incompatible apps around the world will no longer be able to push from this date onwards? At first, I couldn't believe this, so I asked this question.

Also, if it is necessary to add a certificate to our push server, is the following an example of the command to add it correct? Am I correct in assuming that no other work is required?

keytool -v -list -keystore /my-path/cacerts.jks

I have one more question.

[Quote from https://developer.apple.com/news/?id=09za8wzy]

The Certification Authority (CA) for Apple Push Notification service (APNs) is changing. APNs will update the server certificates in sandbox on January 20, 2025, and in production on February 24, 2025. All developers using APNs will need to update their application’s Trust Store to include the new server certificate: SHA-2 Root : USERTrust RSA Certification Authority certificate.

We are currently using the following certificate, which expires in 2028, but will this certificate be invalidated on February 24, 2025, instead of in 2028?

[AAA Certificate Services Root (2028)]

https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html

Do I need to update the certificate of the APNs?
 
 
Q