While it's a bit sketchier than tls-server-end-point, it is supported on the backend with all OpenSSL versions.
This provides a lot more flexibility around version support, and unlike the ToSql/FromSql implementations, these don't actually need to be in postgres itself.