Hello Railway Community,

I'm setting up a private preproduction environment using PostgreSQL 17 with TLS enabled.

I need to verify the PostgreSQL server identity using sslmode=verify-full.

The only certificate-related environment variable available is SSL_CERT_DAYS.

Could someone explain the officially supported way to securely obtain or verify:

• The public PostgreSQL server certificate (PEM) and its Subject Alternative Names (SAN).
• The certificate chain and trusted CA, or confirmation that it is self-signed.
• The corresponding SHA-256 fingerprints.

I would prefer a method that does not require modifying or restarting the database service.

Thank you for your help!