Docker UCP and DTR ssl

I am setup Docker UCP and DTR for Prod enviornment. I am little bit consume on SSL certficate for UCP and DTR. I need to know how much ssl certificate we need to generate for the entire UCP and DTR env, If I have 3 ucp and 3 DTR VM?