If you get these types of error running pacman update

error: failed retrieving file 'mingw32.db' from repo.msys2.org : SSL certificate problem: self signed certificate in certificate chain

one way to fix it is to replace ca-bundle.crt with the self-signed certificate.

This works for us going through netsweeper.