implement CheckIdpMetadataSigningCertificates