The text a2874871227f, as Debian 6.0 (Squeeze) shipped it.
Set the basicConstraints extension
gnutls_x509_crt_set_ca_status(3) on Linux now
