How does the wizard create the private key?
The StartCom CA uses a hardware based real random number generator (RNG) as a high quality source to seed the entropy pool. The software checks the randomness before creating and delivering the key. The key itself is delivered in encrypted form using AES-256-CBC algorithm. Hardware RNG’s provide better randomness much faster than so-called software based pseudo random number generators which are to some extend predictable. In short, good security starts with good random numbers.