anchor.diff:        ciphers: !opt String
         keylog: !opt String
   
  -*cert*:: PEM certificate chain data.
  +*cert*:: PEM certificate chain.
   
   *privkey*: PEM private key associated with given `cert`.
   
  
positive.code: certificates. If the cacert is empty or missing, the SSL identity will not request
  or verify the peer certificate.
  
  The `version` parameter is the supported TLS version. This may be specified as a
  single version "TLS1.2" or a range "TLS1.0-TLS1.2". Supported constants are TLS1.0,
  TLS1.1, TLS1.2, and TLS1.3. Leaving the version empty specifies the default, TLS 1.2.
  
negative.code: 
  The `cert` parameter contains the certificate chain sent to clients that want to
  establish a secure connection. The `privkey` parameter is the private key associated 
  with the main certificate in the chain. The private key may be commingled with the 
  `cert` value instead of being sent in `privkey`.
  
  The `cacert` parameter contains the certificate authority used to authenticate the 
  certificate chain presented by the other end of the connection. The cacert may
  