anchor.diff:      ReqConfigFile = req_config_file(TmpDir, #dn{commonName = Domain}),
       CaConfigFile = ca_config_file(TmpDir, CADir),
   
  +    ?dump(TmpDir),
  +    ?dump(CSRFile),
  +    ?dump(ReqConfigFile),
  +    ?dump(CaConfigFile),
  +
       ?info("Creating a CSR for the Global Registry REST interface..."),
  +
  +    ?dump(ReqConfigFile),
  +    ?dump(KeyPath),
  +    ?dump(CSRFile),
   
       RequestOutput = os:cmd(["openssl req",
           " -config ", ReqConfigFile,
  
positive.code: %% @doc The underlying implementation of {@link grpca:sign_provider_req/2}.
  %% ====================================================================
  -spec sign_provider_req_imp(ProviderId :: binary(), CSRPem :: binary(),
                              CaDir :: string()) -> {ok, Pem :: binary()}.
  %% ====================================================================
  sign_provider_req_imp(ProviderId, CSRPem, CaDir) ->
      TmpDir = mochitemp:mkdtemp(),
  
negative.code: %% ====================================================================
  get_provider_id(#'Certificate'{} = Cert) ->
      #'Certificate'{tbsCertificate =
      #'TBSCertificate'{subject = {rdnSequence, Attrs}}} = Cert,
  
      [ProviderId] = lists:filtermap(fun([Attribute]) ->
          case Attribute#'AttributeTypeAndValue'.type of
  