I contacted Azure support for this matter and their answer was: "I would like to inform you that the new root certificate used by Apple is already present in the trust store of the Notification Hub. Therefore from notification hub side, this change will not impact Azure Notification Hubs.". Finally a clear answer regarding this.