To check if a certificate and key match: openssl x509 -noout -text -in example.com.fullchain.pem | openssl md5 openssl rsa -noout -text -in example.com.key | openssl md5 If you do not have a matching md5 checksum, then the public key and private key don't match. You will need to request them again.