Throw error when chain certs are *not* OpenSSL::X509::Certificate

It looks like the logic to check for cert types was inverted in a recent refactor.
Merge pull request #3 from dina/patch-1

Throw error when chain certs are *not* OpenSSL::X509::Certificate