Found your problem: you should never have someone generate a private key for you.
It's one of StartSSL's flaws too. They are an enabler of doing stupid things.
Found your problem: you should never have someone generate a private key for you.