Recently, I had an old firewall that kept getting certificate errors when I tried to update. Here's how I fixed it.
certctl rehashpkg-static update pkg-static install -fy pkg pfSense-repo pfSense-upgrade
certctl rehash
pkg-static update
pkg-static install -fy pkg pfSense-repo pfSense-upgrade