Hi
For webadmin, it's not necessary to use public cert (3rd party) as it'll be used only from admin laptop to manage the wlc.
However for guest portal it worth using public cert, then guest user won't get any certificate error when accessing the guest portal.
In few words, to webadmin portal and internal authentication (TLS), use internal certificates. For public portals like guest, use external cert (3rd party) to avoid certificates issue on the web page.
Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question