SSL Certificate handshake is not successful for ICA sessions since the VDA's are not enabled with SSL communication.
Mismatch of License edition configured under Studio Licensing

Caution! Using Registry Editor incorrectly can cause serious problems that might require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk. Be sure to back up the registry before you edit it.

Correct the License file edition usage on Citrix Licensing Server and replace with correct License files.
Modify the License edition under Studio to match the License Information under License Administration Console
Verify if DNSResolutionEnabled option is set to True on Broker site configuration; If it is set to True change this value to False

---

Problem Cause

Incorrect License edition configured under Studio
If the VDA's are not enabled with SSL then the communication will be through IP address and not with DNS name
If the DNSResolutionEnabled is set to True on Broker site and Delivery Group should be enabled with HDXSslEnabled is also set to True
VDA's is not enabled with  SSL