certificate requirements are on both the client and the AAA server side.
A WLAN client (that is, a user's machine) requires a valid certificate to authenticate to the WLAN network
The AAA server requires a "server" certificate to validate its identity to the clients
The certificate-authority-server infrastructure issues certificates to the AAA server(s) and the clients