Cisco :: Certificates For SSL Work On The ASA?

I am delving into the world of Certificates and the ASA. I am having the HARDEST time grasping this though. I've poured over Cisco whitepapers, been reading through books and things just aren't solidifying in my head. So my question is, how do Certificates for SSL work on the ASA? Where does the data transmit and how does an ASA talk to a CA and User for things?

Lets do this basic topology for the discussion:

End User------SSL VPN---> ASA--->Internal CA

So in theory we are supposed to create a certificate and install it on the ASA and then set the outside interface to trust that cert?

How do identity certs and root certs also work out on the ASA? I have instructions that pretty much say

Create RSA key
Create new trustpoint
cry ca auth newtrustpoint
cry ca enroll newtrustpoint
cry ca import ?

So what are all of these steps specifically doing? Also in ASDM it shows a normal Certificate and an Identity Certificate. I can't really figure out the difference between the two. Does one cert talk to the CA and the other identify the ASA to the CA?