I am by no means an expert but my understanding is that if you buy a trusted cert then you don’t need to install it on the clients. That’s why you buy them and the trust is what you are paying for.
If you are going to pull data into Excel with the RestAPI then you will need a trusted cert as well - Excel is more fussy about the certs than the web browsers.
Brett