Comment by echlebek

> In fact, the official stance of the SSL team at CloudFlare is that they won’t revoke unless the team has “determined the private key was compromised.”

Sounds like you should email the private key to the Cloudflare security team as plain text