Fall back to checking the certificate for an S/MIME Capabilities X509Extension