Currently, HTTP LB / mTLS cannot be implemented between the Client and XC CE, but it works on RE. This feature is required on CE too. See attached warning when mTLS is implemented on a LB to be deployed on a CE. "Root CA objects are allowed only for HTTP Load Balancers advertised on RE"