I am not familiar with the usage of SSL-Certs (in Icecast). I'd recommend to put them somewhere into a folder the webserver has access to. Don't forget to change ownership and mode etc. check this out about you problem with the files -> http://stackoverflow.com/questions/991758/how-to-get-an-openssl-pem-file-from-key-and-crt-files