I still like StartSSL better than the other options. Yes, obviously opt out of having them generate your private key and CSR and upload your own. There is a big obvious "skip this" button there for that. To me the killer feature is that with class 2 validation ($60/year) you can generate as many 2-year certs, including wildcard as you want.