The text f0dd8d9f1981, as Debian 12 (Bookworm) shipped it.
API function
gnutls_x509_crt_get_name_constraints(3) on Linux now