"Why does the private key file have to start with BEGIN RSA PRIVATE KEY?"
BEGIN RSA PRIVATE KEY
maybe it's my lack of knowledge about certificates, for me the pem must contain a private key in RSA format , it's wrong ?