anchor.diff:           ecdsa_suites/1,
            der_to_pem/2,
            pem_to_der/1,
  -         appropriate_sha/1
  +         appropriate_sha/1,
  +         format_certs/1,
  +         format_cert/1
           ]).
   
   -export([maybe_force_ipv4/1,
  
positive.code: 	    Result
      end;
  connect(ListenSocket, Node, N, _, Timeout, [], ContOpts) ->
      ct:log("ssl:transport_accept(~p)~n", [ListenSocket]),
      {ok, AcceptSocket} = ssl:transport_accept(ListenSocket),    
      ct:log("~p:~p~nssl:ssl_accept(~p, ~p)~n", [?MODULE,?LINE, AcceptSocket, Timeout]),
  
  
negative.code: 	%% Unexpected ->
  	%%     Unexpected
      end.
  
  format_options([{cacerts, Certs}|R]) ->
      [{cacerts, format_certs(Certs)} | format_options(R)];
  format_options([{cert, Certs}|R]) ->
      [{cert, format_certs(Certs)} | format_options(R)];
  format_options([{key, Key}|R]) ->
      [{key, lists:flatten(io_lib:format("~W",[Key, ?PRINT_DEPTH]))} | format_options(R)];
  format_options([Opt|R]) ->
      [Opt | format_options(R)];
  format_options([]) ->
      [].
  
  format_certs(Certs) when is_list(Certs) ->
      [lists:flatten(format_cert(C)) || C <- Certs];
  format_certs(Cert) when is_binary(Cert) ->
      lists:flatten(format_cert(Cert)).
  
  format_cert(BinCert) when is_binary(BinCert) ->
      OtpCert = #'OTPCertificate'{tbsCertificate = Cert} = public_key:pkix_decode_cert(BinCert, otp),
      #'OTPTBSCertificate'{subject = Subject, serialNumber = Nr, issuer = Issuer} = Cert,
      case public_key:pkix_is_self_signed(OtpCert) of
          true ->
              io_lib:format("~.3w: ~s ->   selfsigned", [Nr, format_subject(Subject)]);
          false ->
              case public_key:pkix_issuer_id(OtpCert, other) of
                  {ok, {IsNr, Issuer0}} ->
                      io_lib:format("~.3w:~s -> ~.3w:~s", [Nr, format_subject(Subject), IsNr, format_subject(Issuer0)]);
                  {error, _} ->
                      io_lib:format("~.3w:~s ->    :~s", [Nr, format_subject(Subject), format_subject(Issuer)])
              end
      end.
  
  format_subject({rdnSequence, Seq}) ->
      format_subject(Seq);
  format_subject([[{'AttributeTypeAndValue', ?'id-at-commonName', {_, String}}]|_]) ->
      String;
  format_subject([_|R]) ->
      format_subject(R).
  
  cert_options(Config) ->
      ClientCaCertFile = filename:join([proplists:get_value(priv_dir, Config), 
  