Throw error when chain certs are *not* OpenSSL::X509::Certificate

It looks like the logic to check for cert types was inverted in a recent refactor.