I missed this some time ago, but: you may see errors about certctl(8) when upgrading your packages.  It’s not necessary, yet.