SSL configuration for SharePoint 2013 farm

Question

Hi,

I'm trying to configure SSL on an existing SharePoint farms and although it is partially working, the solution is incomplete. Rather than bore you with what isn't right, I'll share with you the makeup of my farm and what I'm trying to achieve, and hopefully, someone will point me in the right direction.

Farm A - Staging platform using the machine name as part of the URL (no DNS)
1 WFE: ServerA
1 SQL: ServerB

I have 4 web apps using separate ports: CA on 6666, CTH on 5555, STG on 9999 and UAT on port 80.

I would like all of the above, including CentralAdmin to respond to SSL on port 443.

I requested a certificate from our internal Certificate Autority as machinename.ou.domain.com and I received the CER certificate for such. 

- Should I request a wildcard certificate?

- In this scenario, do I need to use separate host names and if so, must I have DNS created for such?

EDITED I think I forgot to talk about my production farm so let me clarify. From what I'm reading, it's possible to do that using a single IP. Also, I want the URLs to be as follow: HTTPS://server1.ou.domain.com for the main web/default web app HTTPS://ca.server1.ou.domain.com for central administration HTTPS://dev.server1.ou.domain.com Etc. For my production server, I currently have a single DNS that points PORTAL.ou.domain.com to my production WFE (Server3) as well as a certificate for PORTAL.ou.domain.com Similarly to the above, the URLs would be: HTTPS://portal.ou.domain.com for the main web/default web app HTTPS://ca.portal.ou.domain.com for central administration Etc. But to add to the mix, I have large site collections under the main web app where I would like to have specific URLs to: HTTPS://docs.portal.ou.domain.com HTTPS://HR.portal.ou.domain.com From what I'm reading I can do all this using a single IP (per server of course) and a single certificate. I'm just confused about how to achieve this.