Something else that is easy to get wrong, if you revoke and create new certificates, after you have made the provisioning profile you have to go back and edit the profile to select the new certificate, and then generate a replacement provisioning file.