diff --git a/CHANGLOG.md b/CHANGLOG.md
index 9423494..41ba022 100644
--- a/CHANGLOG.md
+++ b/CHANGLOG.md
@@ -3,6 +3,8 @@ Change Log
 
 ### master (unreleased)
 
+* Add support for new certificate type (passes)
+
 ### 0.7.4 (2017-01-16)
 
 * Add support for handshake error (internal error)
diff --git a/Classes/NWSecTools.m b/Classes/NWSecTools.m
index 922781e..5c3d569 100644
--- a/Classes/NWSecTools.m
+++ b/Classes/NWSecTools.m
@@ -27,8 +27,10 @@ typedef NS_ENUM(NSInteger, NWCertType) {
     kNWCertTypeVoIPServices = 7,
     /** WatchKit Services. */
     kNWCertTypeWatchKitServices = 8,
+    /** Pass Type ID. */
+    kNWCertTypePasses = 9,
     /** Unknown. */
-    kNWCertTypeUnknown = 9,
+    kNWCertTypeUnknown = 10,
 };
 
 
@@ -139,6 +141,7 @@ + (NWEnvironmentOptions)environmentOptionsForCertificate:(NWCertificateRef)certi
         case kNWCertTypeWebProduction:
         case kNWCertTypeVoIPServices:
         case kNWCertTypeWatchKitServices:
+        case kNWCertTypePasses:
             return NWEnvironmentOptionAny;
         case kNWCertTypeNone:
         case kNWCertTypeUnknown:
@@ -158,6 +161,7 @@ + (BOOL)isPushCertificate:(NWCertificateRef)certificate
         case kNWCertTypeWebProduction:
         case kNWCertTypeVoIPServices:
         case kNWCertTypeWatchKitServices:
+        case kNWCertTypePasses:
             return YES;
         case kNWCertTypeNone:
         case kNWCertTypeUnknown:
@@ -177,6 +181,7 @@ + (NSString *)prefixWithCertType:(NWCertType)type
         case kNWCertTypeWebProduction: return @"Website Push ID: ";
         case kNWCertTypeVoIPServices:  return @"VoIP Services: ";
         case kNWCertTypeWatchKitServices: return @"WatchKit Services: ";
+        case kNWCertTypePasses: return @"Pass Type ID: ";
         case kNWCertTypeNone:
         case kNWCertTypeUnknown:
             break;
@@ -346,6 +351,7 @@ + (NWEnvironment)environmentForCertificate:(NWCertificateRef)certificate
         case kNWCertTypeWebProduction:
         case kNWCertTypeVoIPServices:
         case kNWCertTypeWatchKitServices:
+        case kNWCertTypePasses:
         case kNWCertTypeNone:
         case kNWCertTypeUnknown:
             break;