After renewing and binding a new SSL/TLS certificate for a Citrix StoreFront custom domain URL, users continuing to access the site via a web browser are still served the old or expired certificate

Operating system or browser caching the old certificate

Clear the certificate cache on client computer acceesing the URL.

Step 1: Open Windows Internet Properties

1. Press the key combination Win + R on your keyboard to open the Run dialog box.

2. In the text field, type inetcpl.cpl and press Enter (or click OK).

Verification: The Internet Properties configuration window should open on your desktop.

Step 2: Clear the SSL State

1. In the Internet Properties window, navigate to the Content tab at the top.

2. Under the Certificates section, click the Clear SSL state button.

3. When the confirmation prompt appears stating "The SSL cache was successfully cleared," click OK.

Verification: The popup confirmation confirms that the local SSL cache has been flushed.

Step 3: Restart Your Web Browser

1. Completely close all running instances of your web browser (Chrome, Edge, etc.).

2. Reopen the browser and navigate back to the target website.

Verification: Attempt to access the website to verify that the SSL/TLS certificate error is resolved.

After renewing and binding a new SSL/TLS certificate for a Citrix StoreFront custom domain URL, users continuing to access the site via a web browser are still served the old or expired certificate

https://docs.citrix.com/en-us/citrix-workspace/configure-access/configure-custom-domain.html#providing-a-renewed-certificate