@FiloSottile requested issue #49678 to be considered for backport to the next 1.17 minor release.
@gopherbot please open a backport issue to Go 1.17. This is a regression due to Go 1.17 changes without workaround that makes it impossible to parse some valid (if a little weird) certificates.