The text fb4fac4d8c1f, as Debian 6.0 (Squeeze) shipped it.
get a certificate from a PKCS7 certificate set
gnutls_pkcs7_get_crt_raw(3) on Linux now