Great read! And it even says using CN was deprecated in 2000, and a mandatory fallback to CN followed deprecation in 2011. Wow, I’m pretty sure I was happily installing new certificates that only used CN for a great part of those two decades!
So yeah, while one could probably downgrade Docker, it’s simply really time to get the server side follow the standards.