Correct, only need HTTP and HTTPS two listeners and map to all virtual hosts. Please make sure you enter "www.example.com, example.com " for the www.example.com virtual host domain mapping instead of "*"
About cert, you will need to set a cert to HTTPS listener, all vhost will use the cert from...