openssl rehash .
cp -p NewCaCert.pem <symlink named after hash>  /opt/Citrix/ICAClient/keystore/cacerts/
cp -p NewCaCert.pem                             /opt/Citrix/ICAClient/keystore/cacerts/NewCaCert.crt
cp -p NewIntermediateCert.pem                   /opt/Citrix/ICAClient/keystore/intcerts
cp -p NewIntermediateCert.pem                   /opt/Citrix/ICAClient/keystore/intcerts/NewIntermediateCert.crt

References:

• Error: "SSL Error 61: You have not chosen to trust 'Certificate Authority'..." on Receiver for Mac