As pfSense.org uses a Let's encrypt cert, I can suggest acme.sh.
acme.sh is available for everybody, not only pfSense users ^^
Been using it since day 1 : it's perfect ๐
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.