The text 2f9cd6b9e857, as Debian 11 (Bullseye) shipped it.
API function
gnutls_certificate_verify_peers(3) on Linux now