A private key is the secret key that matches your SSL certificate and must stay only on your server. It is created together with the CSR.
- Never share the private key or send it by email.
- If you lose the key, the certificate cannot be used; you need a new CSR and a reissued certificate.
How is it different from the public key?
| Feature | Public key | Private key |
|---|---|---|
| Sharing | Shared with everyone (it is inside the certificate) | Stays only on the server |
| Role | Encryption and signature verification | Decryption and signing |
| If lost | No problem | The certificate must be reissued |
What does it look like?
It is usually a text file with a .key extension that starts like this:
-----BEGIN PRIVATE KEY-----
MIIEvQIBADANBgkqhkiG9w0BAQEFAASC...
-----END PRIVATE KEY-----
If you created the CSR in Plesk, the private key is stored safely in Plesk; you do not need to download it.
