You cannot use one certificate, because each certificate associated with the application identifier and the application identifier are different for each application (it contains the application package identifier, which is unique for each application).
You must use two certificates, which means that your server will need to know which device pointer which application belongs to and use the appropriate certificate. Perhaps when you send a device token from your application to your server, you should send additional information that indicates which application sent the token).
Eran source share