Currently, HTTP LB / mTLS cannot be implemented between the Client and XC CE, but it works on RE.
Could you implement the same feature for CE?
See attached warning when mTLS is implemented on a LB to be deployed on a CE.
"Root CA objects are allowed only for HTTP Load Balancers advertised on RE"