set up multiple domains with SSL on one Application Load balancer

I am trying to set up multiple SSL domains on a single application load balancer. I have multiple Tomcats on the EC2 instance listening on different ports. I realize that I will need a target group for each application . Do the target groups need to be instance target groups or application target groups? Also how do I assign a different SSL cert to each target group? My certificates are already imported to the AWS certificate manager. I am assuming that I can define a single target group that would correspond to multiple app servers that are listening on different ports. and then have the LB feed requests to those instances based on round robin while still maintaining "stickiness" in the LB. Are these assumptions valid? And am I headed in the right direction?

thanks Charlie