Supabase mentions:
Use this certificate when connecting to your database to prevent snooping and man-in-the-middle attacks.
My project infra is Supabase backend with React SPA front-end hosted on AWS S3 > CloudFront > WAF
Where does the certificate go? I'm not too familiar with this process and haven't found much info elsewhere.