Right, but... I have about 30 certificates from StartSSL. Four second-level domains, and best security practices recommended having a separate key per service,

Right, but... I have about 30 certificates from StartSSL. Four second-level domains, and best security practices recommended having a separate key per service, so web server has its own keys, so is email server, XMPP and so on. The idea was that if one's compromised - others would hopefully remain safe. Call me names, but I'm not going to shell out $750.