How do I know which certs match which key?
The private key contains a series of numbers. Two of those numbers form the “public key”, the others are part of your “private key”. The “public key” bits are also embedded in your certificate (we get them from your CSR). To check that the public key in your cert matches the public portion of your private key, you need to view the cert and the key and compare the numbers. To view the cert: [root@ntbox conf]# openssl x509 -noout -text -in ssl.crt/server.crt Certificate: Data: Version: 1 (0x0) Serial Number: 0 (0x0) Signature Algorithm: md5WithRSAEncryption Issuer: C=US, ST=NC, L=Cary, O=My New Outfit, Inc., OU=Sales, CN=ntbox.somewhere.com/Email=me@somewhere.com Validity Not Before: Oct 7 04:19:24 1999 GMT Not After : Oct 6 04:19:24 2000 GMT Subject: C=US, ST=NC, L=Cary, O=My New Outfit, Inc., OU=Sales, CN=ntbox.somewhere.com/Email=me@somewhere.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1024 bit) Modulus (1024 bit): 00:c9:dd:68:31:ca:1c:ab:74:7c:21
