4 ms·
You are correct, it's very easy to check to see if a private key matches a cert: $ openssl x509 -pubkey -noout -in cert.pem | openssl rsa -pubin -outform der
by hamburglar 9y ago
You are correct, it's very easy to check to see if a private key matches a cert:
$ openssl x509 -pubkey -noout -in cert.pem | openssl rsa -pubin -outform der | openssl sha1
writing RSA key
(stdin)= 92635f3403046f4d7d0e0b40829dc24b0370478d
$ openssl rsa -in key.pem -pubout -outform der | openssl sha1
writing RSA key
(stdin)= 92635f3403046f4d7d0e0b40829dc24b0370478d