You would only need to add certificates here is you need that certificate to use an API or something like that. Webservices can be protected using certificates. So if some service has given you a certificate you could add it here and use it to access the service. See also documentation here on when you want to restrict your own published webservices: https://docs.mendix.com/developerportal/deploy/access-restrictions

Regards,

Ronald