I am having some luck with new/corrected startup scriprs provided by another post. By changing the startup scripts (not the config files) in /etc/init.d courier-imap-ssl and courier-pop-ssl to the modified ones I now have the processes back running and listening.
going to test now. I noticed the firewall does not have the ssl ports open by default, I would assume (oh oh !!) that ports 993 and 995 need to be opened.
new configuration survived a reboot with all 4 services pop pop-ssl imap imap-ssl running and listening.
This is the post with the corrected/fixed scripts that (seem to) solved my problem.