On app servers you have to put their respective certs in order to ensure encrypted communication between load balancer and app servers
On load balancer you have to put another certificat for your load balancer to ensure secure connection between endusers and loadbalancer.
Point 2. Depends on load balancing method you use because for simple redirections it may not be really needed but for eg. Reverse proxy it will be needed.