The text 40dab6aa764b, as Debian 10 (Buster) shipped it.
API function
gnutls_ocsp_resp_check_crt(3) on Linux now