You can install a custom certificate to Mobility Express controller from CLI like on other versions of WLC.Here an how-to: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00...