• Verify that a public key in a certificate matches a private key
 openssl x509 -modulus -noout -in tls.crt
Modulus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
 openssl rsa -noout -modulus -in tls.key
 
Modulus=E203E7DCEB2B0513E9BCF306A0B7980DA8647F5EF4F3A13EDD6C5AADA28A44B256C227EA7659CFFB80A6779372D6315B0E0F231C4BDD546AABD30B27CF15A38DAC81801BBE4B66E7A80A3C7D63DCD271DFD411705AF7B3111C4F6935CAC8739E7CCAFA71A09D9D8C0CEF9E943E904413079B8932D75E0DFA2A573EE3E80557C944A835A1E59D5ADF6F298AD4AA7CCDA89D09FF9510F2B69754B2D0FB3483BEA9222247432E57013A35AAEF27C61D0C551827806AF4C608ECEBCBDADEE11260C555FED1B6FC56A72D18DF3FDA7692236163D3BB3075E22596BCC45783B11CE9D36DD9EEEF87AD99093B51F7E4C50952E42B90C7C0751F96F62AA76AA6489C4507