The text ef84fa9270f9, as Debian 12 (Bookworm) shipped it.
API function
gnutls_x509_crt_set_spki(3) on Linux now