Certificate-questions?

Hi there,

I don't fully understand how certificates when deploying CAS and MBX on separate servers. Here are my questions:

1. I have multiple Certificates that overlap in the assignes services. How ca that be?
   CAS:
       - MYCERT: valid, IMAP, POP, IIS, SMTP
       - Microsoft Exchange Server Auth Certificate: valid, SMTP
       - Microsoft Exchange: valid, IIS, SMTP
       - WMSVC: valid, None
   MBX:
       - Microsoft Exchange Server Auth Certificate: valid, SMTP
       - Microsoft Exchange: valid, IMAP, POP, IIS, SMTP
       - WMSVC: valid, None
2. How do I know what certificate is really being used for what service?
3. Get-ExchangeCertificate returns only the certificates from MBX, not CAS?
4. What if I want to add an additional certificate in a multi-tenant-installation?

I have some clues, but I like to get some answers from you to get it right.

Thanks

ϻοϰsϯεr