you specify the SSL options and (optionally, the cert) in the connection string: https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING