Use these commands to see if a private key matches a server’s certificate: # openssl rsa -noout -modulus -in server.key # openssl x509 -noout -modulus -in server.crt If the modulus us the same, you can use them.

If you want to validate your kickstart files, install pykickstart. It comes with /usr/bin/ksvalidator which gives info on what is wrong with your kickstart files (syntax et cetera).