I have been using Push Diagnostics to assist our school network provider to diagnose network issues blocking APNS at some sites. It has been working well, including the final push test, up until recently when the push test fails even though the other tests pass. I have tested this on several known open networks with no firewall for reference.
The log details are in the attached screenshot