Hello. I see the following description in the doc.
https://www.postgresql.org/docs/13/ssl-tcp.html Intermediate certificates that chain up to existing root certificates can also appear in the ssl_ca_file file if you wish to avoid storing them on clients (assuming the root and intermediate certificates were created with v3_ca extensions). Certificate Revocation List (CRL) entries are also checked if the parameter ssl_crl_file is set. (See http://h41379.www4.hpe.com/doc/83final/ba554_90007/ch04s02.html for diagrams showing SSL certificate usage.) I follwed the URL above and saw the "Support and other resources" page of the document "OpeNVMS Systems Documemtation Index page". FWIW the folloing URL shows "HP Open Source Security for OpenVMS Volume 2: HP SSL for Open VMS", which seems to be the originally intended document.. https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c04622320 regards. -- Kyotaro Horiguchi NTT Open Source Software Center