certs: Fix blacklist flag type confusion