i hope there will be a 3th choice: waiting "Let's Encrypt"
maybe this but outside ISPconfig. http://wiki2.dovecot.org/SSL/DovecotConfiguration#With_client_TLS_SNI_.28Server_Name_Indication.29_support
Separate names with a comma.