http://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-communications-manager-callmanager/115957-high-level-view-ca-00.html
Expressways use a single certificate, there is a whole document dedicated to certificates for VCS which also covers expressways.
HTH
java
if this helps, please rate