Yeah, Webuzo saved my key and certificate in one file the same way. That was the error I was getting when added domains were going to the default/primary domain. I see it's done it again, so I would agree, it's something the devs of Webuzo need to address. As I understand it, you can combine the 2 into 1 file, but it apparently is missing a line break from one to the other when adding them.
I don't see why a StartSSL certificate is any different than a paid certificate, it's the same format and code, just a lesser known issuer, but better than self signed for sure. It doesn't bring up that 'Warning - self signed certificate' message.
I'll do the separate certs and edit the configs to match them and see how that works. All required ports are open, so it should work after that.
Thanks for the link to the spam email test. I knew about that site, but couldn't remember the link. I came up with a 6.4 score which is basically because of only 2 issues. One is no DKIM record, which shouldn't be a real issue, it helps to have one, but not having one isn't a bad thing (except in Google's eyes, we'll see).
The other issue is my IP shows up in one blacklist, Barracuda, and I have already asked them to remove it, and they have, just takes a little time to propagate through all their servers. That also prompted SpamCop to give a lower score, so just getting out of the blacklist will get me to 9/10, which still doesn't guarantee Google will accept it, but we'll see. Setting up DKIM is another series of pain in the ass steps I'd rather avoid if I don't need to so I'll leave it as a last resort.