Fix self signed detection, switch to authorityKeyIdentifier instead of compare subject and issuer