In my understanding, when a client wants to communicate with a server, HTTPS can be used which involves SSL certificate. This is very secured channel where information is exchanged between client and server by means of a session key.
The session key is symmetric which has been generated by means of asymmetric keys (public/private keys).

So I am wondering why there is a need to have JWT in place?