Follow the steps below to update your SSL Certificate on your Citrix Netscaler VPX appliance. In the below example I have used Version 10 as I have recently had to follow this process myself because one of my certificates had expired. At first, the task seemed a little daunting but in the end, the process was actually quite easy.
Your first step will be to log into your Citrix Netscaler appliance.
The default username and password will be –
Username -nsroot
Password- nsroot
Under the configuration tab browse to Traffic Management -> SSL -> Certificates

To install the certificate you will need a signed certificate and a private key.
To create a CSR and Install SSL Certificate visit this helpful post outlining instructions on how to create your CSR (certificate signing request) and then, install your SSL and intermediate certificates. Citrix NetScaler VPX: Create CSR and Install SSL Certificate
Enter a name for your Certificate Key Pair. As a practice, I key the name of the certificate pair, certificate and key the same.

Once you have installed your certificate successfully you will now need to bind the certificate to your Citrix Netscaler gateway

Edit the current VPN virtual server and select the current server certificate to bind your new certificate


Your certificate should now be installed and bound to your Citrix Netscaler gateway. Ensure you test connection from various browsers from a machine external to your network.