e server's
   SSL configuration without a server restart, but see <a class="xref" href="runtime-config-connection.html#GUC-SSL-PASSPHRASE-COMMAND-SUPPORTS-RELOAD">ssl_passphrase_command_supports_reload</a>.
   Furthermore, passphrase-protected private keys cannot be used at all
   on Windows.
  </p><p>
   The first certificate in <code class="filename">server.crt</code> must be the
   server's certificate because it must match the server's private key.
   The certificates of <span class="quote">“<span cla