Extend AttributeQuery SSL Connection

Also check against IDP certificate from metadata, when check certificate for https connection. There are some cases, where IDPs use the self-signed, or signed certificate from metadata. These certs typically have no anchor in standard public keystores.