Fix upstream_cert call in case of https2http

We should ask for upstream cert only if there is:
1) no no_upstream_cert option specified
2) ssl connection to server is established