[exim] Certificate and given key don't match

The funny part is - they do and have the same modulo when I check over openssl - but of course Exim on Debian is linked against GnuTLS.

There are no stray spaces in the certificate, the CN etc are a match, permissions are ok but I still get this error.

The exact same set of commands generated a working tls cert for Exim this day last year :(

What else do I look for?

thanks
--srs

ps: first post since like 2003 or so.