it must match the private key, and in general it's not blog specific but superdesk instance i think