check that the installed certificate corresponds to the private key