THE SINGLE BEST STRATEGY TO USE FOR CERTIFICATE COURSE

I have a DAG surroundings with 6 servers(2Mailbox+2CAS+2EDGE,Exchange2013 CU21), on that case, I just do the process in any one mailbox server (for instance MX1SVR) and after that wait around the new certificate to replicated to one other five servers for the duration of some hrs ? OR i ought to run a similar procedure on a single CAS server and ju