What is required to get a signed certificate trusted by the Apple Push Notification Service?

A.
an Apple ID with a valid e-mail address

B.
an Apple ID with a valid e-mail address and an IBM signed CSR file

C.
an Apple ID and a SSL key generator application included with the management extender
D. an Apple ID with a valid e-mail address and an IBM signed PEM file e-mailed to the user during the
management extender installation