As VERIFY_CA, and additionally require the certificate to name the host being connected to.
The spelling used in a JDBC URL and by libpq.
libpq