So assuming that it actually is correct, you may be getting bitten by an expired (intermediate) certificate that prevents you accessing the repo to get updated certificates.
If that is the case, a temporary workaround procedure is here: Librem 5 will not update with wifi - #18 by amarok