I'm no SSL / security expert but it seems odd to me that they would require the private key. Are you using the self signed cert for ESXi or a public cert?
It sounds like you're accessing ESXi directly over the Internet. Have you considered putting it behind a VPN device?