Let's Encrypt certificates are primarily for web servers, so to use one for dovecot/IMAP it's necessary to establish a webserver at the same DNS as the IMAP server.