Handle revoked certificates in the reflection api

APNS apps that have had their certificates revoked are hard to identify. The error message doesn't include the name of the app. This adds a `:ssl_certificate_revoked` method to the reflection api. From here you can identify, log, or delete the offending app.