Free PKI tool

Does this private key match this certificate?

Paste a private key and a certificate to instantly check whether they're a matching pair — the single most common cause of a botched TLS deployment is uploading the wrong key.

Open in full-page tool suite →
How it works

Three steps, nothing leaves your browser

Paste the private key

Your PEM-encoded private key — it never leaves your browser.

Paste the certificate

The certificate you're about to deploy alongside it.

Get an instant match result

A clear yes/no, comparing the public key modulus embedded in each.

Questions

Common questions

Why does this matter?

Deploying a certificate with the wrong private key breaks TLS entirely — this check catches it before you push to production.

Is my private key uploaded anywhere?

No — the comparison runs entirely client-side in your browser.

Does this work with RSA and ECC keys?

Yes — both RSA and ECC (P-256/P-384) key/certificate pairs are supported.