"There are two methods for communicating with the APNs servers.
(1) provider certificates
(2) provider authentication tokens
The doc referenced at
https://developer.apple.com/library/content/documentation/NetworkingInternet/Conceptual/RemoteNotificationsPG/CommunicatingwithAPNs.html#//apple_ref/doc/uid/TP40008194-CH11-SW1
sometimes does not clearly separate the two.
In your case, you are using method 2, provider authentication tokens. You do not need the provider certificates. Your statement that the SSL certificate is required for each apple bundle id is mentioned in "Creating a Universal Push Notification Client SSL Certificate". But, that is for method (1) provider certificates.
What you will need to do, if you want to send push notifications to multiple apps, is tell the APNs which app you are requesting push notifications for. You do this by configuring the 'apns-topic' header field in your HTTP request. See Table 8-2 APNs request headers. In the apns-topic section, you will see the following,
"If you are using a provider token instead of a certificate, you must specify a value for this request header. The topic you provide should be provisioned for the your team named in your developer account."
This requirement is not mentioned in the WWDC 2016 What's New in the Apple Push Notification Server https://developer.apple.com/videos/play/wwdc2016/724/
The apns-topic is your app-bundle-id found in XCode => Target => General tab => Bundle identifier.
Since you are already using the APNs successfully, you only need to modify the apns-topic in the HTTP requests going out for the new app.