Update InCommon example in XRD file

InCommon metadata is now served from host md.incommon.org, so the link in the sample XRD file was corrected. Moreover, the metadata server does not support TLS, only XML Signature, so an authentic copy of the metadata signing certificate was included.