The weird script from https://github.com/puiterwijk/qemu-ovmf-secureboot
gives the output, but instead one can also use OVMF_VARS.secboot.fd
from Fedora.