fix keyUsage treatment for SNI