You can use any kind of SSL certificate. Of course if the certificate is not generated by a CA, que the customers connect to the QlikView WebServer a security issue is going to be shown on their browser. When using a third party certificate, this 3rd party "authenticates" that the certificate in use is legitimate.
Beyond that, it works with an self signed certificate as well.