Yes, you need certificate that matched domain/Vhost that you've configured in the Tigase. tigase-server should automatically generate self-signed certificate but those are not considered secure enough thus most of the libraries/clients reject them by default (some give you option to accept those but it depends on the client/library).

Please check our documentation: Server Certificates