If your app relies on OneSignal for push notifications, they handle compatibility with Apple's updated APNs Trust Store certificates, as they manage the connection to APNs for you.
Simply keep the OneSignal SDK up to date and refer to their documentation for more details: https://documentation.onesignal.com/docs/ios-sdk-setup