I don't know how much you know about icecast but many people have struggled with it. One key issue is that the cert file it needs must have both the fullchain and private key in the bundle file. I did not see this mentioned yet in this thread.
Here is another thread with an icecast person from earlier that talks about this and has links to docs.