MDM push notifications require to be signed by a special certificate, which is only available upon request.

While that is true, anyone can get a push notification cert, this is a different cert..