So this is more of a reminder of what we did than an announcement.
We've been playing tag with SnC (our cert provider) and ComTech (the Netscaler admins) to get a PKI certificate installed for the Citrx servers, which run IIS on Windows.
The key request was not generated on the Windows hosts on which they were to be used, which makes everything more exciting.
We had the following files: