Might be a silly question, but I don't wanna risk messing up a working system.
We have two separate Active Directories, let's say "example.local" and "example.com". There's a trust between the two, so these domains are actually connected.
We'll set up a new software within a couple of days and it requires a secure LDAP connection to both domains (LDAP over SSL). Currently there's no CA available.
According to Microsoft we have to set up a CA, create a new server authentication certificate and distribute that one to all DCs.
I'm wondering whether I have to distribute the very same certificate to the other domain's DCs as well? Or do I have to set up two separate CAs (one for each domain) and distribute each certificate just to their corresponding DCs? I'm a little bit confused, sorry in advance!