not necessary to add the root certificate to
   <code class="filename">server.crt</code>.  Instead, clients must have the root
   certificate of the server's certificate chain.
  </p></div><div class="sect2" id="SSL-OPENSSL-CONFIG"><div class="titlepage"><div><div><h3 class="title">19.9.2. OpenSSL Configuration <a href="#SSL-OPENSSL-CONFIG" class="id_link">#</a></h3></div></div></div><p>
   <span class="productname">PostgreSQL</span> reads the system-wide
   <span class="productname">OpenSSL</span> configu