Main kaise check karun ki private key certificate se match karti hai?

Certificate (ya CSR) aur private key ko do boxes mein paste karein. Tool har ek se public key derive karta hai, dono ke liye SHA-256 fingerprint dikhata hai, aur identical hone par MATCH report karta hai — wahi result jo openssl modulus hashes compare karne se milta, par command line ke bina.

Modulus mismatch kya hota hai?

RSA mein, ek certificate aur uski private key same modulus share karte hain, isliye woh same public key produce karte hain. Modulus mismatch ka matlab certificate aur key alag pairs se aaye aur ek saath kaam nahi karenge — jaise agar certificate issue hone ke baad key dobara generate ki gayi ho.

Kya meri private key kahin upload hoti hai?

Nahi. Certificate, CSR aur private key poori tarah aapke browser mein parse aur compare hote hain. Aapki private key aapke device par process hoti hai aur kabhi server par nahi bheji jaati.

Kya main ek CSR ko uski private key se match kar sakta hoon?

Haan. Certificate ke bajaye ek certificate signing request paste karein aur woh usi tarah private key ke against match hota hai — CSR ko certificate authority ko submit karne se pehle useful.

Kya yeh encrypted private keys support karta hai?

Haan. Agar aapki private key passphrase-protected hai, key box ke neeche wale field mein passphrase enter karein aur tool use locally decrypt karke uski public key derive karta hai.

Kaunse key types supported hain?

RSA private keys PKCS#1 aur PKCS#8 PEM formats mein supported hain, jo RSA certificates aur CSRs ke against match hoti hain. EC keys ke liye support baad mein aa sakta hai.

Certificate & Private Key Matcher

Check karein ki koi SSL certificate aur private key ek saath belong karte hain ya nahi, seedhe aapke browser mein. Aapki private key aapke device par process hoti hai aur kabhi upload nahi hoti.

Aapka certificate aur private key poori tarah aapke browser mein parse aur match hote hain aur kabhi upload nahi hote. Phir bhi, kisi bhi online tool mein jise aap control nahi karte, production private keys paste karne se bachein.

Key format convert kar rahe hain? PPK ↔ PEM Converter try karein.

Certificate & Private Key Matcher ke baare mein

Yeh certificate aur private key matcher confirm karta hai ki ek X.509 certificate (ya CSR) aur private key sach mein ek saath belong karte hain — woh check jo aap warna do openssl commands se chalate aur aankhon se compare karte. Apna certificate ya CSR ek box mein paste karein aur private key doosre mein, aur yeh aapko MATCH ya NO MATCH bata deta hai. Kyun, yeh dikhane ke liye yeh har input se public key derive karta hai, use canonical form mein serialize karta hai, aur har ek ke liye SHA-256 fingerprint dikhata hai: jab fingerprints identical ho to pair valid hai, aur difference classic modulus mismatch hai. Yeh RSA keys support karta hai, encrypted private key ke liye optional passphrase handle karta hai, aur unparseable PEM ke liye clear errors deta hai. Sab kuch poori tarah aapke browser mein chalta hai, isliye aapki private key aapke device par process hoti hai aur kabhi upload nahi hoti.

Features

Certificate aur private key ek saath belong karte hain, yeh clear MATCH / NO MATCH verdict se confirm karta hai
Ek CSR ko us private key ke against bhi match karta hai jisne use generate kiya
Har input ke liye SHA-256 public-key fingerprint dikhata hai taaki aap exactly dekh sakein kyun match hua ya nahi
Detect aur label karta hai ki aapne certificate paste kiya ya CSR
Encrypted (PEM) private key ke liye optional passphrase accept karta hai
Malformed PEM ke liye readable errors deta hai, cryptic failures ke bajaye
RSA keys ke saath PKCS#1 aur PKCS#8 PEM formats mein kaam karta hai
Poori tarah client-side chalta hai, isliye private key kabhi aapke device se bahar nahi jaati

Certificate & Private Key Matcher kaise use karein

Apna X.509 certificate ya CSR left box mein paste karein.
Matching private key right box mein paste karein.
Agar key encrypted hai, neeche wale field mein uska passphrase enter karein.
MATCH ya NO MATCH verdict padhein aur do public-key fingerprints compare karein.

Example

Input

# The classic openssl equivalent this tool replaces:
openssl x509 -noout -modulus -in cert.pem | openssl sha256
openssl rsa  -noout -modulus -in key.pem  | openssl sha256

Output

MATCH
Cert key  a1b2c3…  (RSA 2048-bit)
Priv key  a1b2c3…
Identical fingerprints — the certificate and key belong together.

Do openssl modulus commands chalane aur hashes compare karne ke bajaye, do files paste karein aur verdict padhein.

Common errors aur troubleshooting

Tool NO MATCH report karta hai halaanki aap expect kar rahe the ki files pair hongi. — Shayad aapne alag-alag pairs ka certificate aur key paste kiya, ya certificate reissue karne ke baad purani key. Do fingerprints compare karein aur re-check karein ki is certificate ya CSR banane mein kaunsi key use hui thi.
Aapko "Could not parse the certificate or CSR" dikhta hai. — Sunishchit karein ki aapne poora PEM block paste kiya, including -----BEGIN CERTIFICATE----- aur -----END CERTIFICATE----- lines. Ek DER (.der/.cer) file ko pehle PEM mein convert karna hoga.
Aapko "Could not decrypt the private key" dikhta hai. — Passphrase field mein sahi passphrase enter karein. Agar key koi unsupported cipher use karti hai, apne key tooling se passphrase hataayein aur unencrypted PEM paste karein.
Ek EC key recognize nahi hoti. — Matching abhi RSA private keys ko PEM mein support karta hai. EC key ke liye, filhaal apne khud ke tooling se public keys compare karein.

Aksar pooche jaane wale sawaal

Main kaise check karun ki private key certificate se match karti hai?: Certificate (ya CSR) aur private key ko do boxes mein paste karein. Tool har ek se public key derive karta hai, dono ke liye SHA-256 fingerprint dikhata hai, aur identical hone par MATCH report karta hai — wahi result jo openssl modulus hashes compare karne se milta, par command line ke bina.
Modulus mismatch kya hota hai?: RSA mein, ek certificate aur uski private key same modulus share karte hain, isliye woh same public key produce karte hain. Modulus mismatch ka matlab certificate aur key alag pairs se aaye aur ek saath kaam nahi karenge — jaise agar certificate issue hone ke baad key dobara generate ki gayi ho.
Kya meri private key kahin upload hoti hai?: Nahi. Certificate, CSR aur private key poori tarah aapke browser mein parse aur compare hote hain. Aapki private key aapke device par process hoti hai aur kabhi server par nahi bheji jaati.
Kya main ek CSR ko uski private key se match kar sakta hoon?: Haan. Certificate ke bajaye ek certificate signing request paste karein aur woh usi tarah private key ke against match hota hai — CSR ko certificate authority ko submit karne se pehle useful.
Kya yeh encrypted private keys support karta hai?: Haan. Agar aapki private key passphrase-protected hai, key box ke neeche wale field mein passphrase enter karein aur tool use locally decrypt karke uski public key derive karta hai.
Kaunse key types supported hain?: RSA private keys PKCS#1 aur PKCS#8 PEM formats mein supported hain, jo RSA certificates aur CSRs ke against match hoti hain. EC keys ke liye support baad mein aa sakta hai.

Related tools

PPK ↔ PEM Converter — SSH private keys ko PuTTY .ppk aur OpenSSH/PEM (RSA & Ed25519) ke beech aapke browser mein locally convert karein.
SSH Key Generator — Ed25519, RSA ya ECDSA SSH key pairs aapke browser mein generate karein aur download karein.
JWT Decoder — Ek JWT ka header aur payload decode karein aur exp/iat inspect karein (bina verification ke).
Hash Generator — Web Crypto API ke through SHA-256 / SHA-1 / SHA-384 / SHA-512.
Basic Auth Generator — Username aur password se HTTP Basic Auth Authorization headers generate aur decode karein.