Sorry, it looks like I missed the last sentence in this paragraph
"Once enabled select the App ID and choose Edit (if you are not already there) and scroll down to the push notification section. Click Create Certificate in the Production SSL Certificate box and generate a certificate for it. Download the certificate and place it in a folder that is easy to access via the command line (there is no need to add the certificate to your keychain). In your keychain find the private key that was generated for this certificate, export it, and place it in the same folder."
Exporting the main app signing certificate creates the p12 file.
OryUI - A WIP AGK2 UI Framework