You might want to start at the beginning instead of rushing into a situation where you think you need something, but actually don't.
First, make sure you know the goal of what you're going to do. The goal here is to make sure your PIC32mx based device can connect to your server at myfreedomaintest.website
using TLSv1.2/v1.3, right? So your PIC-based device is the CLIENT and the server at myfreedomaintest.website
is the SERVER. This is important.
Now with the above clarified, you need to know how the TLS protocol actually works. What requirements does the server have and which requirements does the client have? Which party of those two actually needs a certificate under normal circumstances? Is it the client? Is it the server?
I'll leave the latter question to you as "homework".