Hello Brad,
please note that certificate is related to the device itself , so every device must have its own certificate.
in your ACS scenario , each server must have its own certificate that is generated from same CA...
Kind regards
Talal
========
please rate answers that you find useful