Like hell. He did awful things, which got national attention due to the president taking a liking to them. No matter if he likes it or not, he's currently a person of national interest, meaning that naming(and shaming, considering the content) isn't doxxing. As the saying I made up just now goes, if you can't deal with the consequences of having your klan hood pulled off and your face shown to the world, don't put the klan hood on in the first place.
Plus, just naming the guy and the state that he lives in wouldn't be doxxing anyway. They're refusing to name the guy, not refusing to post his home address, phone number, and the names of his family members.
Not quite. CNN figured out who he was, and reached out to him for comment. He started bricking it, deleted all his shit, and posted apologies. He then called CNN to apologize. CNN is not publishing his name because they're giving him the benefit of the doubt - basically, protecting him from the social consequences of his actions, because he's already showing remorse and willingness to change his behavior, meaning that being party to further social consequences is pointless and cruel. They're also hedging their bets in case he isn't, and basically saying "But if he's not genuine, there's no more reason to protect him from the consequences of his actions." They did not, at any point, make a deal with him.