exchange server certificate confusion

Hi

i wanted to ask about the exchange server certificate, is it ok to make the SAN's for the child domain or i should make them for the root domain?
e.g 
mail.child.domain.com
autodiscover.child.domain.com
or
mail.domain.com
autodiscover.domain.com
????

---

regards Brian Moyo