vici: Don't compare unsigned certificate_type_t to -1