Intune APNs Certificate Expired: A Read-First Renew-vs-Replace and Enrollment-Error Triage

Intune APNs cert expired? Read Tenant status and Graph expiry, decode enrollment errors, confirm Apple ID and topic, then renew—never replace.