According to Mobile Control, our APNs certificate expired on May 16, 2018.
According to Apple, it was renewed on Feb 26, 2018.
It looks like it was never installed in the MDM, so it shows up as having expired, so we must have lost control of our devices…