X509 negative serial number error

[SarathK6]

we are using Azure secret store CSI driver older version and with nodepool version upgrde(2025-01-12), csi driver got updated and we are no longer able to mount the Certificate to volume.

Error: server.go:60] "failed to process mount request" err="failed to get objectType:secret, objectName:qat-encryption-certificate, objectVersion:: x509: negative serial number"

Upon digging a little bit, this seems coming from : https://cs.opensource.google/go/go/+/master:src/crypto/x509/parser.go;l=926;bpv=1;bpt=0

Is it strict rule now that all Azure CSI driver consumers should be using Positive serial number certificates.

Can this behavior be overwritten by setting x509negativeserial variable 1 to skip this validation