You should never send a private key. Private keys are private. That is a poorly written tutorial - written by someone that may not understand PKI. You generate

You should never send a private key. Private keys are private. That is a poorly written tutorial - written by someone that may not understand PKI. You generate the CSR and send that.