running engine-setup should give you the opportunity to update expired or expiring certificates.

If you don't want to upgrade your system you can run it with the --offline option.