first over all you need only 1 Certificate for the Domain-Name which points to the VIP-IP.
Also i would recomend that your going to build your csr (certificate signing request) with an open-ssl implementation (offline), so you can also specify the complexity of your private key + bit lenth 2048!
regarding to your question about the client experience, they won't notice anything as the certificate is name based.
