Changing the Certificates for Universal forwarder, I know how to push the certificates out but will I need one certificate per host?

Hi! I'm changing the Certificates for Universal forwarder, I know how to push the certificates out but will I need one certificate per host? Or can I add the hostname in the SAN? or how do you people do that have about 3000 UF's to change on? (I only have like 50 so it is possible to do it manually) //P