Postgres SSL & DB password rotation

We are started working on enable SSL on our postgres databases, currently we are using three certs ( root.crt, server.crt, server.key).

Is there a way we can enable only root.crt cert or combine all three into one single certs to connect DB.

Pls suggest if any best practice for dynamic password vault and rotation for postgres DB user.

Regards,

SK