diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2a0a82756..7094211f6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@
 - [#4664](https://github.com/influxdata/telegraf/issues/4664): Fix server connection and document stats in mongodb input.
 - [#5010](https://github.com/influxdata/telegraf/issues/5010): Add X-Requested-By header to graylog input.
 - [#5052](https://github.com/influxdata/telegraf/issues/5052): Fix metric memory not freed from the metric buffer on write.
+- [#3817](https://github.com/influxdata/telegraf/issues/3817): Add support for client tls certificates in postgresql inputs.
 
 ## v1.9 [2018-11-20]
 
diff --git a/plugins/inputs/postgresql/README.md b/plugins/inputs/postgresql/README.md
index e31fcff69..a873ddac0 100644
--- a/plugins/inputs/postgresql/README.md
+++ b/plugins/inputs/postgresql/README.md
@@ -45,6 +45,13 @@ A list of databases to pull metrics about. If not specified, metrics for all dat
 
   `databases = ["app_production", "testing"]`
 
+### TLS Configuration
+
+Add the `sslkey`, `sslcert` and `sslrootcert` options to your DSN:
+```
+host=localhost user=pgotest dbname=app_production sslmode=require sslkey=/etc/telegraf/key.pem sslcert=/etc/telegraf/cert.pem sslrootcert=/etc/telegraf/ca.pem
+```
+
 ### Configuration example
 ```
 [[inputs.postgresql]]