Martin Goodson <kaemaril@googlemail.com> writes:
> Or am I stuck with either requesting a new certificate without the
> passphrase or going to PostgreSQL 11?
AFAIK, those are your options. Pre-v11 there was no reasonable way
to work with a server cert that requires a passphrase.
regards, tom lane