anchor.diff:      iolist_to_binary(pubkey_pem:encode(PemEntries)).
   
   %%--------------------------------------------------------------------
  --spec pem_entry_decode(pem_entry(), [string()]) -> term().
  +-spec pem_entry_decode(pem_entry(), string()) -> term().
   %
   %% Description: Decodes a pem entry. pem_decode/1 returns a list of
   %% pem entries.
  
positive.code: 		    parameters = Params,
  		    publicKey = {0, PubKey}}.
  
  pkix_issuer_id(#'OTPCertificate'{} = OtpCert, Signed, decode) when (Signed == self) or 
  								   (Signed == other) ->
      pubkey_cert:issuer_id(OtpCert, Signed);
  pkix_issuer_id(#'OTPCertificate'{} = OtpCert, Signed, encode) when (Signed == self) or 
  								   (Signed == other) ->
      case pubkey_cert:issuer_id(OtpCert, Signed) of
  	{ok, {Serial, Issuer}} ->
  	    {ok, {Serial, pubkey_cert_records:transform(Issuer, encode)}};
  	Error ->
  	    Error
      end;
  pkix_issuer_id(Cert, Signed, Decode) when is_binary(Cert) -> 
      OtpCert = pkix_decode_cert(Cert, otp),
      pkix_issuer_id(OtpCert, Signed, Decode).
  
negative.code: %
  %% Description: Returns the issuer id.
  %%--------------------------------------------------------------------
  pkix_issuer_id(#'OTPCertificate'{} = OtpCert, Signed) when (Signed == self) or 
  							   (Signed == other) ->
      pubkey_cert:issuer_id(OtpCert, Signed);
  pkix_issuer_id(Cert, Signed) when is_binary(Cert) -> 
      OtpCert = pkix_decode_cert(Cert, otp),
      pkix_issuer_id(OtpCert, Signed).
  
  %%--------------------------------------------------------------------
  -spec pkix_crl_issuer(CRL::binary()| #'CertificateList'{}) -> 
  