danielmai commented :
@gorjuspixels is right. If the system isn’t configured to trust the root CA generated by dgraph cert then you must provide it along with the client certificate and client certificate key to be properly authenticated.
Also, you shouldn’t set https:// in the address name. The address host and port is sufficient.