There is no need for you to run either openssl, or keytool when using Let's Encryption. Xeams will take care of these steps on its own. Using these tools to modify the cert will only make matters worse.

I recommend you watch a video https://www.xeams.com/video-letsencrypt.htm on creating a certificate and avoiding manually modifying the files.