So eventually got it sorted and for anyone struggling like me, these steps fixed it:
https://support.citrix.com/article/CTX231524
1.Click on the Lock left of
https://... and choose "More Information"
2.Click on "View Certificate"
3.Change to the tab "Details"
4.Highlight your CA certificate in the Certificate Hierarchy field and click the "Export" button
5.Save the certificate (in X.509 Certificate (PEM) format) to your Desktop and give it the file extension .crt
6.Sudo copy the file to /opt/Citrix/ICAClient/keystore/cacerts and then execute command /opt/Citrix/ICAClient/util/ctx_rehash
Still wonder why I didn't have to do this previously.