The text a2a751343bfa, as Debian 11 (Bullseye) shipped it.
API function
gnutls_ocsp_resp_verify_direct(3) on Linux now