private key

The secret half of a key pair; it stays on the server and proves the certificate belongs to it. Certificate and key must match, or nginx rejects the configuration (key values mismatch).