I have a series on Citrix and while support is getting better, they do tend to change things. For example the location of the binary binary binary binary.
They have also moved the location of the application from /usr/lib/ICAClient to /opt/Citrix/ICAClient, a more unix like move.
The famous SSL error 61
The SSL Error 61, is now easily fixed by copying the certs into the correct directory
cp -v /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts/