Generating CSR for MRA/ Clustered Expressways

How to generate a certificate signing request for Cisco Expressway for use with either Mobile and Remote Access or in a clustered environment.

[farzanehyousefi]

Thanks for this video .
one question?
If I have not activated clustering yet and I just generate a CSR for one of expway-e, (But I wrote all the names for the second expway-e and clustering names, ) and get my certificate and CA for it, then after clustering should I generate CSR again?

[kennethbaluyut]

Hello and thanks for this video! I have a clustering enabled expressway. So I just name them ExpCPub and ExpCSub. Do I need to generate a separate CSR for each server or just the Pub/Primary will do? Will it automatically sync the cert in Subscriber if I upload it in the Publisher?

I tried generating them separately, I chose
CN as "FQDN of Expressway of the Cluster"
SAN as "FQDN of Expressway Cluster plus FQDNs of all peers in this cluster"
and and doing a self-sign but the Subscriber is not being signed as they both have the same CN.