The required certificate and keys are different based on whether you are using asymmetric binding or symmetric binding. The most notable difference is that clients do not need a private key when using symmetric binding.