ssl_ca                      = </etc/dovecot/ssl/ca.pem
ssl_cert                    = </etc/dovecot/ssl/fullchain.pem
ssl_key                     = </etc/dovecot/ssl/privkey.pem

ssl_require_crl             = yes
ssl_verify_client_cert      = yes