2019 AWS CA Certs for RDS are reaching end of support. There are new certs that users can upgrade to as listed here

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html

Per support case 160488, please support "rds-ca-ecc384-g1".