Обновление сертификатов на Desktop delivery controller (DDC) 7.x.
https://support.citrix.com/article/CTX227572
https://www.torivar.com/2016/03/16/replace-ssl-certificates-on-citrix-storefront-and-delivery-controller/

netsh http show ssl
netsh http delete sslcert ipport=0.0.0.0:443
netsh http add sslcert ipport=0.0.0.0:443 certhash=bc3f4796d6ef09608119a4e9323e2534f45ef555 appid={CE24291B-1344-DC94-DB16-51875A6501C3}

Open the registry and navigate to HKEY_CLASSES_ROOT\Installer\Products\
Then search for the next “Broker Service” entry. The key GUID is the required “appid” value.
Note that you may have to add hyphens in the GUID. For instance, from this:
CE24291B1344DC94DB1651875A6501C3 to this:
CE24291B-1344-DC94-DB16-51875A6501C3

certhash=bc3f4796d6ef09608119a4e9323e2534f45ef555 (just a sample shown here).
This is the thumbprint of the new certificate.