How do you make the Keyboard Maestro Web server use specific SSL certificates?
The inbuilt one? There is no way to control the self signed certificate that Keyboard Maestro generates.
If you need different levels of security, I would suggest you use the Remote trigger instead.
Is the certificate and key generated once if required and stored somewhere?
Yes, it is stored in a private keychain.