apnsagent: to separate compound cert