Aws Rds Ssl Ca Cert Pem, or add it to the Trusted Root CA for the client OS.