You’re right. I used the --sslcert and --sslkey settings (along with the ?sslmode=require in the connection string) and it works!
I was almost ready to give up because testing the connection in /settings/databases page kept giving me the same error as above, but when I tried it in the notebook it worked.
For the record, I’m running the proxy in a remote server.