# Verifying Certificates, CSRs, Keys ```shell $ openssl pkey -in keyfile.pem -pubout -outform pem | sha256sum $ openssl x509 -in certfile.pem -pubkey -noout -outform pem | sha256sum $ openssl req -in csrfile.csr -pubkey -noout -outform pem | sha256sum ``` All SHAs should match if they're the correct series of files. # Removing passwords from keys ```shell $ openssl rsa -in keyfile.pem -out new-keyfile.pem ```