anchor.diff:                  % step if error occured
                   mark_letsencrypt_undecided()
               end,
  +
  +            % this will be executed only on certification success
               set_has_letsencrypt_cert(true);
           false ->
               set_has_letsencrypt_cert(false),
  
positive.code:                 Record#service{ctx = maps:put(has_letsencrypt_cert, false, ServiceCtx)}
          end
      end);
  modify_letsencrypt_enabled(_) -> ok.
  
  %%--------------------------------------------------------------------
  %% @doc
  
negative.code:     case rpc:call(Node, provider_logic, is_subdomain_delegated, []) of
          {true, _} ->
              #{domain := Domain} = rpc:call(Node, provider_logic, get_as_map, []),
  
              try
                  ok = letsencrypt_api:run_certification_flow(Domain)
              after
  