Skip to content

Key Matcher

Check which private keys, certificates and CSRs belong together, with the OpenSSL modulus check. Encrypted keys and .pfx files work. Runs in your browser.

A certificate only works with the private key it was issued for. When a server won't start ("key values mismatch", "the private key does not match the certificate"), or you have a folder of .key, .crt and .csr files and don't know which go together, this tells you: everything with the same public key is grouped. It also shows the value openssl x509 -noout -modulus | openssl md5 prints, so you can compare with a server.

Local only

Matched in your browser. Your private keys and passwords never leave your device.

Keys are read and compared on your device (WebAssembly and Web Crypto). Nothing is uploaded, stored or logged. To confirm, open your browser's developer tools (F12), go to the Network tab and run a match: no request is made.

Or paste PEM (any mix of keys, certificates and CSRs)
Password (encrypted key or .pfx)