This is great to see! We made very sure to give certs out to everything when we build Crunchy Bridge on day one and when you connect with the CLI it automatically downloads the cert to your local machine and places it in the right spot.
Finally, no longer are MITM attacks between dynos and Heroku Postgres possible. :-)