That, and not wanting private keys on an external cloud service should be a big blocker for enterprises.
I'd rather have an internal tool managing the certificates and deploy those to NetScaler using NitroAPI. Because it is easier to integrate with other systems.