A REVIEW OF EXCHANGE CERTIFICATE

I have a DAG atmosphere with six servers(2Mailbox+2CAS+2EDGE,Exchange2013 CU21), on that scenario, I just do the procedure in any one mailbox server (for instance MX1SVR) and after that wait the new certificate to replicated to one other five servers in the course of some several hours ? OR i ought to operate a similar system on a single CAS server