SL-13921 Only one of extended key usages is needed

LN (EKU_TLS) is more likely to be present thus should be checked first