OpsBench

Key & CRT Match

Check that a private key really belongs to a certificate.

● Runs on our server
— optional, for a three-way check
We derive the public key from each file and compare — the same thing openssl x509 -modulus | md5 does, without having to remember the command. Nothing is stored.

How it works

We derive the public key from your private key and compare it — modulus for RSA, curve point for ECDSA — with the public key inside the certificate.

Related tools

Let's Encrypt Wizard SSL Checker PEM to PFX CSR Generator