Found your problem: you should never have someone generate a private key for you.
It's one of StartSSL's flaws too. They are an enabler of doing stupid things.
It's one of StartSSL's flaws too. They are an enabler of doing stupid things.