I just figured this out after a few hours, so in addition to what JulianB said,
make sure you have an application icon. You probably have one but i happened to add push when we were between icon versions. I tried allot of different things and in the end that was all it took so it might not even be a cert or signing setting issue.
I've also read a corrupt image file could also be the cause
i did not add/see an aps-environment key in my entitlements.plist