na een update ...
sudo ln -s /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts/
cd /opt/Citrix/ICAClient/keystore/cacerts/cp /etc/ssl/certs/ca-certificates.crt .awk 'BEGIN {c=0;} /BEGIN CERT/{c++} { print > "cert." c ".pem"}' < ca-certificates.crt