What are cert.pem and key.pem used for by the local HTTPS server?
cert.pem
key.pem
They are the username and password lists Hydra will try.
They replace the Python handler and contain the entire web application.
They store credentials discovered by Hydra.
The certificate presents the server identity, and the private key enables the server-side TLS handshake.