go1.20.14 (released 2024-02-06) includes fixes to the crypto/x509 package. See the Go 1.20.14 milestone on our issue tracker for details.
Skipping a bonus felt strange at first, but now I see it can be the smarter choice.