To use this worksheet, use the FIND AND REPLACE function:

replace your.url.com with your URL
replace your@email.com with your email
replace ChangeMe with your password

$ git clone https://github.com/letsencrypt/letsencrypt
$ cd letsencrypt
$ ./letsencrypt-auto --help

Get the Certificate
./certbot-auto certonly --standalone --email your@email.com --agree-tos -d your.url.com

Create the Keystore
When prompted for a password, enter one and make note of it since it will be needed throughout this process.  

sudo openssl pkcs12 -export \
  -in /etc/letsencrypt/live/your.url.com/fullchain.pem \
  -inkey /etc/letsencrypt/live/your.url.com/privkey.pem \
  -out /etc/letsencrypt/live/your.url.com/fullchain_and_key.p12 \
  -name tomcat

Password is:  ChangeMe

sudo keytool -importkeystore \
  -deststorepass ChangeMe \
  -destkeypass ChangeMe \
  -destkeystore /etc/letsencrypt/live/your.url.com/keystore.jks \
  -srckeystore /etc/letsencrypt/live/your.url.com/fullchain_and_key.p12 \
  -srcstoretype PKCS12 \
  -srcstorepass ChangeMe \
  -alias tomcat
Create the Truststore
sudo keytool -export -alias tomcat \
  -file /etc/letsencrypt/live/your.url.com/tomcat.cer \
  -keystore /etc/letsencrypt/live/your.url.com/keystore.jks \
  -storepass ChangeMe -noprompt

sudo keytool -import -trustcacerts -alias tomcat \
  -file /etc/letsencrypt/live/your.url.com/tomcat.cer \
  -keystore /etc/letsencrypt/live/your.url.com/truststore.jks \
  -storepass ChangeMe -noprompt

red5.properties
# RTMPS Key and Trust store parameters
rtmps.keystorepass=ChangeMe
rtmps.keystorefile=/etc/letsencrypt/live/your.url.com/keystore.jks
rtmps.truststorepass=ChangeMe
rtmps.truststorefile=/etc/letsencrypt/live/your.url.com/truststore.jks