Add this line to the <paths></paths> section:
<ssl-certificate>/etc/icecast2/bundle.pem</ssl-certificate>
Now, add this section to the document (in the root XML node):
<listen-socket>
<port>443</port>
<ssl>1</ssl>
</listen-socket>
Quit the text editor, and now restart Icecast: