anchor.diff:      case rpc:call(Node, provider_logic, is_subdomain_delegated, []) of
           {true, _} ->
               #{domain := Domain} = rpc:call(Node, provider_logic, get_as_map, []),
  +
               try
                   ok = letsencrypt_api:run_certification_flow(Domain)
               after
  
positive.code:     start_cleaning/1, check_oz_connection/1]).
  -export([restart_listeners/1, restart_provider_listeners/1, async_restart_listeners/1]).
  -export([obtain_webcert/1, set_txt_record/1, remove_txt_record/1,
      modify_letsencrypt_enabled/1, clear_pem_cache/1]).
  
  -define(SERVICE_OPA, service_onepanel:name()).
  -define(SERVICE_CB, service_couchbase:name()).
  
negative.code:                 % step if error occured
                  mark_letsencrypt_undecided()
              end,
  
              % this will be executed only on certification success
              set_has_letsencrypt_cert(true);
          false ->
              set_has_letsencrypt_cert(false),
  