Seems like your machine doesn't recognize the certificate for https://deb.torproject.org, which is a separate issue from eg. the GPG key not matching which would make it untrusted.
Seems something in the certificate chain from Let's Encrypt has expired, because the cert itself is still valid.