When exporting the pfx, don’t include the certificate chain. Then in a NetScaler shell session:
cd /nsconfig/ssl
openssl pkcs12 -in myPfxFile.pfx -nocerts -out myCertKey.key
You can then import the certificate in the normal way in the NetScaler GUI SSL > Certificates > Server Certificates > Install
