Generate new private key and csr

openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key

Remove private key passphrase

openssl rsa -in privateKey.pem -out newPrivateKey.pem

Check Certificate and Private Key match

openssl x509 -noout -modulus -in server.crt | openssl md5
openssl rsa -noout -modulus -in server.key | openssl md5