Read carefully. If handhelds are deployed and are under MDM control, generating a new APNS certificate (instead of renewing) will result in deployed handhelds to be orphaned from MDM perspective.

More...