Added support for UnsubscribeConfirmation.
Only get the signing certificate from trusted urls

Added an AWS_SNS_BOUNCE_CERT_TRUSTED_DOMAINS setting which contains
a list of domains which can be trusted when receiving the signing
certificate for bounce messages.
Only trust https certificate urls.