"Later this year" Apple will introduce APNS provider authentication based on JSON Web Tokens, i.e. we hopefully don't have to deal with expiring certificates anymore.
Session 724 from WWDC16 has a little more information:
However, the documentation hasn't been updated yet. I'll update this if there are any new announcements.