The text a07f9f24f8f7, as Debian 8 (Jessie) shipped it.
API function
gnutls_x509_crt_set_ca_status(3) on Linux now