Recommended Apache config

No you don’t, it’s for client certificates which is used for mutual authentication (if you needed it, you’d know it).