If you use a CMEK, the CMEK is used to encrypt the Object Data, Object's checksum and MD5 hash, but not the object name. The object name is still encrypted with server side keys so that the metadata can be accurately retrieved