Ubiquity improvement: prefer a full SHA-2 chain if the leaf cert is a SHA-2 cert.

Plus a minor typo fix