Refuse to connect unencrypted. The certificate itself is not checked.
The spelling used in a JDBC URL and by libpq.
libpq