"CSR public key and Certificate public key do not match"

[john.t.wright42.civ]

I generated the CSR from the server, processed it, and a Certificate was returned.

We are trying to upload a valid certificate onto our server and are getting the following error:

"CSR public key and Certificate public key do not match"

Not sure how to fix it, any help would be great!

[Chris Deren]

Does not seem like the cert was properly signed. Did you perhaps generate another CSR before importing the provided cert? Do you have the root and intermediate certs loaded on your server in the trust repository?

[Sharif Alkatib]

This is the correct answer. 

I had downloaded the new certificate from the CA too quickly before it had fully refreshed the certs. When I attempted to import I was importing an old tomcat certificate. Once I uploaded the new certificate that matched with the newly generated CSR then I was all good.

When in doubt - generate a new CSR and get new certs.