Thanks, I can confirm this works with psycopg2 and sslmode='verify-full'.
psycopg2
sslmode='verify-full'