Tonibert we validate if the SchUseStrongCrypto and SystemDefaultTlsVersions value are set. These settings are important to ensure consistent results in TLS usage. Extended Protection requires a proper TLS configuration. Even the smallest difference can result in connectivity issues and that's the reason it's so important to have all the keys and values in place before Extended Protection is enabled.
You can find the required settings for .NET Framework here (the first link referenced in the HealthChecker TLS documentation):
https://docs.microsoft.com/en-us/Exchange/exchange-tls-configuration?view=exchserver-2019#enable-tls-12-for-net-4x
Thanks for your feedback. We will revise the HealthChecker TLS documentation to provide a little more context.