Both is possible. One certificate with different domains (Cloudflare creates certificates with 30 - 50 domain names - non-www and www) and one certificate per domain (non-www and www, perhaps some subdomains).
First version -> the CN doesn't match
Second version -> CN = domain name
Now you have a Grade B, that's very good.