* ssl_key = <path_to_your_key_file

* disable_plaintext_auth = yes

Your key/certificate don't have a .pem extension but they are PEM-encoded files. You can confirm that using the '''file''' command. If you're interested - here's some documentation about [http://wiki2.dovecot.org/SSL/DovecotConfiguration Dovecot SSL configuration].