Menu Show

Certificate Key Matcher

Verify Key Pairs, SSL Certificates and CSR Match

When you're talking about SSL you're dealing with a lot of moving parts. It's a lot to manage for just a single domain, but when you toss in complicated web infrastructures with multiples domains, sub-domains and internal networks, it's easy to get mixed up.

When you generate a Certificate Signing Request, you're also issued a Private Key that needs to be stored safely on your server. Typically, keeping the CSR and the Private key matched up can be accomplished by saving them to the same directory. But once the SSL certificate is issued, especially if you're dealing with multiple orders, it's important you can match up the certificate with the key. Otherwise it's not going to install properly.

Need an SSL Certificate?

85% Off Comodo
SSL Certificates

Shop Now

Make Sure Your CSR, SSL Certificate and Private Key Match

To check whether a certificate matches a private key, or a CSR matches a certificate, you'll need to run following OpenSSL commands:

openssl pkey -in privateKey.key -pubout -outform pem | sha256sum

openssl x509 -in certificate.crt -pubkey -noout -outform pem | sha256sum

openssl req -in CSR.csr -pubkey -noout -outform pem | sha256sum

Helpful Tip: Of the three - SSL Certificate, CSR and Private Key - your private key is the most important. Its security is paramount. If it's ever compromised, your website becomes vulnerable until you re-issue and re-install. Make sure your Private key is stored safely and unauthorized personnel cannot access it.

Accepted formats: .crt, .cer, .pem, .txt (paste content directly above)

Accepted formats: .csr, .pem, .txt (paste content directly above)

Please complete the reCAPTCHA verification

Any mismatch, especially between a private key and an SSL certificate is going to mess you up. You'll probably have to re-issue and that's going to waste a lot of time.

If you run into any trouble, or need a helping hand, our team of SSL experts is always standing by to take your call or live chat with you. We provide 24/7 customer support, 365 days a year. Sometimes even 366.

Don't Overpay for your Next Certificate— Save Now, Activate Later!

Take advantage of this limited-time discount now. You can issue and install your certificate whenever you’re ready,
with the full validity period starting from the date of issuance.

Take 10% Off Any Year Certificate

Coupon Code: SAVE10 Shop Now

SSL Tools to Solve Any Problem

ComodoSSLstore offers a range of SSL tools to help with tasks like decoding CSRs, installing certificates, and
configuring servers. These tools ensure your SSL setup is accurate and effective.