The text 8570818d8260, as Debian 5.0 (Lenny) shipped it.
Set the basicConstraints extension
gnutls_x509_crt_set_ca_status(3) on Linux now