What should be considered when configuring certificates for BYOD?

What should be considered when configuring certificates for BYOD?

A. The SAN field is populated with the end user name. B. The CN field is populated with the endpoint host name. C. An endpoint certificate is mandatory for the Cisco ISE BYOD. D. An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment.