[CalendarServer-users] APNS, Darwin Calendar Server

Lion Server.app manages the whole process, of obtaining signed certificates for use with APNS, internally. My (admittedly hazy) understanding is that users of Darwin Calendar Server must generate a CSR manually, and then go to https://identity.apple.com/pushcert/ (with a valid Apple ID). * Are there instructions for creating such a CSR? * Does one need separate CSRs for CalDAV and for CardDAV push notifications?