Activesync client Certificate authentication with third party CA

Hi, I have to configure ActiveSync certificate based authentication, and use a third party CA.

What informations and fields must I configure on the cert template, to use it for activesync  ?

For now I've a template with the CN (FirstName LastName) for the Subject Name  and a Subject Alternative name with UserPrincipalName (user@domain). Is it enough ?

Do I must publish the user's certificate  in AD ?

Thanks