The text a841a385a3ca, as Debian 12 (Bookworm) shipped it.
API function
gnutls_certificate_set_trust_list(3) on Linux now