The text c0b7091ed835, as Debian 11 (Bullseye) shipped it.
Generate partial X509 certificate.
tpm2_certifyX509certutil(1) on Linux now
