anchor.diff:  				      subjectPublicKey = Key}) ->
       {Key, Params}.
   
  -other_issuer(OtpCert, BinCert, CertDbHandle, CertDbRef) ->
  +other_issuer(#cert{otp=OtpCert}=Cert, CertDbHandle, CertDbRef) ->
       case public_key:pkix_issuer_id(OtpCert, other) of
   	{ok, IssuerId} ->
   	    {other, IssuerId};
   	{error, issuer_not_found} ->
  -	    case find_issuer(OtpCert, BinCert, CertDbHandle, CertDbRef, []) of
  +	    case find_issuer(Cert, CertDbHandle, CertDbRef, []) of
   		{ok, IssuerId} ->
   		    {other, IssuerId};
   		Other ->
  
positive.code:                     maybe_shorten_path(Path, PartialChainHandler, {unknown_ca, Path})
              end;
          false ->
              case other_issuer(OTPCert, IssuerCert, CertDbHandle, CertDbRef) of
                  {other, {SerialNr, IssuerId}} ->
                      case ssl_manager:lookup_trusted_cert(CertDbHandle, CertDbRef, SerialNr, IssuerId) of
                          {ok, {NewDer, NewOtp}} ->
  
negative.code: 						SerialNr, Issuer) of
  	{ok, {IssuerCert, ErlCert}} ->
              Cert = #cert{der=IssuerCert, otp=ErlCert},
  	    certificate_chain(Cert, CertDbHandle, CertsDbRef, [Cert | Chain], ListDb);
  	_ ->
  	    %% The trusted cert may be obmitted from the chain as the
  	    %% counter part needs to have it anyway to be able to
  