When Launching Applications Using Citrix Receiver Through NetScaler Gateway.

If you are experiencing this issue and you are not a System Administrator, contact your organizations Help Desk for assistance and refer them to this article.

This does not mean that the CA certificates currently being used is expired but the CA has since released newer versions of that certificate.

Then, compare all the certificates in the browsers certificate chain with the certificate chain at NetScaler Gateway.

If there are any mismatches in intermediate certificates, this is a possible cause.

Update NetScaler Gateway with the corresponding intermediate certificates, as they appear in the web browser.

You can export the intermediate certificates from the web browser.

If you used more than one web browser, it is possible that they yield different certificate chains.

If the browser trusts the intermediate, it trusts the server certificate, without going down to the root certificate and will display the newer version of the root from its certificate store and not the actual root certificate sent by the server or NetScaler Gateway.

In Receiver for Android 3.12.2, joint server certificate validation is turned off by default.

If this policy is enabled in the Receiver without the correct set of certificates configured on the servergateway, users may see the error message.

Citrix Receiver For Mac 12.2