The feature of CAs generating certificates that way is deprecated says RFC 2818 in a non-normative way (since it's outside the scope of RFC 2818). The feature

The feature of CAs generating certificates that way is deprecated says RFC 2818 in a non-normative way (since it's outside the scope of RFC 2818). The feature of supporting it is mandatory says RFC 2818 in a normative way. It is mandatory if we are to agree on HTTPS being defined by RFC 2818, which the Chromium developers themselves referenced.