Just as a side-note: I used to use StartSSL, too. But compared to the new letsencrypt it's a lot of hassle and seems complicated in comparison.