Many Citrix Secure Gateway implementations are old and based upon 1024 bit encryption. So when you get the email notification about your certificate soon expires you find out that it’s no longer possible to renew a 1024 bit certificate.
The procedure for creating a new 2048 bit or higher is quite fast and simple as long as you know how to do it. Below I show you the way.
First off create a new website, in the example above I’ve used the name NewCertSite.
Then right click the new site, select Properties and navigate to the Directory Security tab.