Verify that certificate and key belong together

OpenSSL will not be very helpful if you accidentally mismatch certificate and private key.  This adds a check to make sure that they match.