go1.25.3 (released 2025-10-13) includes fixes to the crypto/x509 package. See the Go 1.25.3 milestone on our issue tracker for details.