It is not within the scope of this tutorial to be a fully basic knowledge tutorial for IPsec and PKI. IKEv2 VPN clients use it to check the authenticity of the target VPN server to prevent being spoofed by a fake server. Using IKEv2 onboard VPN clients on Windows and Apple always requires a server certificate.