BTW, I got my cert from StartSSL and to make it work I had to append the intermediate CA bundle to the end of my .crt file.
Just as a side-note: I used to use StartSSL, too. But compared to the new letsencrypt it's a lot of hassle and seems complicated in comparison.