aws rds modify-certificates
Override the system-default Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate for Amazon RDS for new DB instances, or remove the override. AWS CLI reference
2 options Its page in the AWS CLI reference
Options
--certificate-identifierThe new default certificate identifier to override the current one with.--remove-customer-overrideSpecifies whether to remove the override for the default certificate.