CSR for ssl certificates

When you create a client SSL profile you are basically intercepting the SSL communications and acting as the server, so the client SSL profile should present the cert for the service the LTM is fronting.

When you create a server SSL profile you are proxying the client traffic, acting as the client, talking back to the server, so you do not need to add a specific cert to that profile - you just use the LTMs cert.