In most of cases you don't need certificates because if they was installed they will be automatically used. You can check installed certificates in Settings> Certificate manager.

Error could be because you use: username@domain.
In our network this is not working. I just need username. But in some networks it is necessary