Security section needs proper explanation of peer-certificate contents

https://etcd.io/docs/v3.5/op-guide/security/#example-3-transport-security--client-certificates-in-a-cluster

There’s no explanation given of what the CN or SAN need to be in the peer certificates. Given that every TLS peer decides for itself what it accepts this seems like critical information … unless I’m missing something?

Thank you!