Self-signed certificate for `localhost` / `127.0.0.1` – **for the tests only** (local HTTPS target server).
It isn't trusted anywhere and protects nothing, which is why the key is deliberately in the repo.