The text f85e42ab1a6a, as Debian 11 (Bullseye) shipped it.
API function
gnutls_ocsp_resp_verify(3) on Linux now