The text b672b09a99e1, as Debian 9 (Stretch) shipped it.
check if given certificate is CA certificate
X509_check_ca(3ssl) on Linux now