If Self Signed Digital Certificates are used, please explain the business reason for this and please specify if these can be replaced with Certificates signed by either the WCC internal CA, or an external CA (and who would be responsible for this.)
No, all certificates are handled by an external CA, all certificates are signed by Amazon.