Your client does the checking of the server cert, no need for any configuration server side. If you use certs for client auth it’s unlikely it’s used on the we

Your client does the checking of the server cert, no need for any configuration server side. If you use certs for client auth it’s unlikely it’s used on the web and only in a company setting where you control the PCs, where you could just use something more suited for that case.