You must periodically renew certificates used to provide encrypted notification. Renewing a certificate creates a new certificate with a new expiration date.
Select your server in the Server app sidebar, then click Settings.
Next to “Enable Apple push notifications,” click Edit.
Next to the expiration date, click Renew.
Enter the Apple ID and password.
Click Renew certificate.