The text 931c1de1ebd4, as Debian 10 (Buster) shipped it.
API function
gnutls_certificate_set_flags(3) on Linux now