When using Certificate Authentication within Splunk, are they self-signed, or can I use third-party certs as well?
You can use either self signed certificates or third party certs. I've seen both configurations. There are useful instructions for 3rd party CA's on the community wiki that were written by hexx.
http://www.splunk.com/wiki/Community:SplunkWeb_SSL_3rdPartyCA