Ubiquity improvement: prefer a full SHA-2 chain if the leaf cert is a SH...

...A-2 cert.

Plus a minor typo fix