The text 34eb5aafbb7a, as Debian 10 (Buster) shipped it.
API function
gnutls_x509_tlsfeatures_check_crt(3) on Linux now