CA certificate and MDM profile

[Asifahmed]

I wanted to know the exact function of CA certificate and MDM profile.
If we enable Push Proxy then why we need PKI in Jamf console to communicate mac clients to APNs?