I am still learning how TLS works.
I've create a sample golang client-server app, then used cfssl to generate certificates.
Now what I did is create a CA, then create the client and server certificate signed by that CA.
The server and client config is almost the same except for the organization and organization unit.
Now the server will receive the server public cert and its key and the CA certificate, and the client will also receive the client public cert and its key and the CA certificate.
My question is if an intruder is able to copy the client public certificate and its key and also the provided CA certificate, could he perform a MITM attack between the server and the client?
Edit: The scenario I was thinking of is both the client and the server within the local network, but their client computer has an internet connection.