TLSOptions.requestCert

If set to true, the server requests a client certificate, and refuses a client without a valid one unless rejectUnauthorized is false. This option alone decides it: ca does not request a certificate.

Default is false.