You need both if you want the site to be accessible on both - even if you then set one of them as the Primary domain (so all traffic to the other domains gets redirected to it).

Since you have set up the DNS for both it makes sense to have certificates for both I think!

Cheers

Joe