Note:
Repeat the CSR creation and subsequent steps for different AE Services servers and use the same CA to sign each of the CSRs. This way all the AE Services clients only need to know one CA certificate, that signed all the AE Services server certificates.