When you get a new SSL certificate to install, how can you be sure the key matches the certificate? If they do not match, the web server may fail to start or SSL in general for your website may not work.
Fortunately openssl allows us to compare the modulus of the SSL key and certificate easily enough by:
[root@web01 ~]# openssl rsa -noout -modulus -in yourdomain.key | openssl md5 [root@web01 ~]# openssl x509 -noout -modulus -in yourdomain.crt | openssl md5
If the resulting MD5 checksums match, then the key matches the certificate. If they do not match for some reason, that typically indicates that the key used to generate the original CSR is different from the key you are currently testing against.