Binary client. Uhm. Yeah... nope. Wasn't StartSSL (haha. SSL) the CA that also offered to create the key on your behalf? Sketchy!