Hi
If you want to do dot1x authentication based on certificates, you don't need plus licenses.
If you want to profile phones devices to push the voice domain then you'll need plus licenses.
However, you can push an authorization based on certificates info to push the right authorization with voice class domain.
Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question