i believe those are build against non-OpenSSL 1.1.1 branch so don't have TLS 1.3 supported by official nginx docker images.