The text 9a11c79ef5dc, as Debian 9 (Stretch) shipped it.
X509 verification parameters
X509_VERIFY_PARAM_set_flags(3ssl) on Linux now