doc/go1.16: pre-announce GODEBUG=x509ignoreCN=0 removal in Go 1.17

For #40700
Updates #24151

Change-Id: Id63dcaad238f7534bfce8902b8cb3efd8db5942d
Reviewed-on: https://go-review.googlesource.com/c/go/+/266539
Trust: Filippo Valsorda <filippo@golang.org>
Trust: Katie Hockman <katie@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>

doc/go1.16.html

@@ -501,6 +501,13 @@ <h3 id="minor_library_changes">Minor changes to the library</h3>
 
 <dl id="crypto/x509"><dt><a href="/pkg/crypto/x509/">crypto/x509</a></dt>
   <dd>
+    <p>
+      The <code>GODEBUG=x509ignoreCN=0</code> flag will be removed in Go 1.17.
+      It enables the legacy behavior of treating the <code>CommonName</code>
+      field on X.509 certificates as a host name when no Subject Alternative
+      Names are present.
+    </p>
+
     <p><!-- CL 235078 -->
       <a href="/pkg/crypto/x509/#ParseCertificate">ParseCertificate</a> and
       <a href="/pkg/crypto/x509/#CreateCertificate">CreateCertificate</a> both