anchor.diff:  	 pkix_normalize_name/1,
   	 pkix_path_validation/3,
   	 pkix_verify_hostname/2, pkix_verify_hostname/3,
  +         pkix_verify_hostname_match_fun/1,
   	 ssh_decode/2, ssh_encode/2,
   	 ssh_hostkey_fingerprint/1, ssh_hostkey_fingerprint/2,
   	 ssh_curvename2oid/1, oid2ssh_curvename/1,
  
positive.code: 		       Options, pubkey_crl:init_revokation_state()).
  
  %--------------------------------------------------------------------
  -spec pkix_verify_hostname(Cert :: #'OTPCertificate'{} | binary(),
  			   ReferenceIDs :: [{uri_id | dns_id | ip | srv_id | oid(),  string()}]) -> boolean().
  
  -spec pkix_verify_hostname(Cert :: #'OTPCertificate'{} | binary(),
  			   ReferenceIDs :: [{uri_id | dns_id | ip | srv_id | oid(),  string()}],
  			   Options :: proplists:proplist()) -> boolean().
  
  %% Description: Validates a hostname to RFC 6125
  %%--------------------------------------------------------------------
  
negative.code: 	    end
      end.
  
  pkix_verify_hostname_match_fun(https) ->
      fun({dns_id,FQDN=[_|_]}, {dNSName,Name=[_|_]}) -> verify_hostname_match_wildcard(FQDN, Name);
         (_, _) -> default
      end.
  
  %%--------------------------------------------------------------------
  -spec ssh_decode(binary(), public_key | ssh_file()) -> [{public_key(), Attributes::list()}]
  	      ; (binary(), ssh2_pubkey) ->  public_key()
  