I followed this artical. it took me while but it did worked. it was just test though
may be you need to put full path for all .crt and .key.
that is the only difference I see on my test setup and your kibana config.
plus I didn't had following two line in my kibana.yml file
elasticsearch.ssl.certificate: certs/wildcard_cert.crt
elasticsearch.ssl.key: certs/wildcard_cert.key