Paste a certificate (or CSR) and a private key to confirm they're a genuine matching pair — before you find out the hard way during installation.