Creating SHA-2 certificate using keychain assistant
Turns out this was just my misunderstanding of how to read the certificate info and the various SHA algorithms.  I saw SHA-1 and SHA-256.   I did not realize the latter was a SHA-2 variant.  Apologies for any confusion this question may have caused.