Get cert block for orgs in generate_ca_cert