Throw error when chain certs are *not* OpenSSL::X509::Certificate

In a recent refactor (f270d266b6435739cad7e4818dd1918535d97539) it looks like the logic to check for cert types was inverted.