Question
When purchasing certificates for the NetScaler/Citrix Access Gateway Enterprise Edition from the SSL certificate vendor Web site, what Web server type should you specify?
Answer
When requesting a certificate from a vendor that will be used on the NetScaler for SSL encryption, specify that the server runs Apache with OpenSSL.
This prompts the vendor to generate the certificate in Privacy Enhanced Mail (PEM) format. The NetScaler supports SSL certificates in both the PEM and DER formats, but expects the PEM format by default.
FYI, when generating a CSR, watch your characters in the input fields. When I included an ‘ in the company name, the following error pops up:

