[vacri]

As a totally-naive-to-your-problem-particulars and totally-hacky suggestion, why not start nginx with a starter cert, then mv the new cert into position and reload nginx?

[sandGorgon]

exactly what I did - but then I bought a certificate from rapidssl for 10 bucks...