Move private key callout to byo-ca.mdx only (#23890)

Author: RebeccaTamachiro

src/content/docs/ssl/client-certificates/byo-ca.mdx

@@ -24,7 +24,11 @@ Bring your own CA (BYOCA) is especially useful if you already have mTLS implemen
 
 ## CA certificate requirements
 
-<Render file="byo-ca-mtls-cert-requirements" /><br />
+<Render file="byo-ca-mtls-cert-requirements" />
+
+:::note
+Uploading the CA private key is only required if you wish to use [Zero Trust's block page](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/). For more context on how mTLS works, refer to our [Learning Center](https://www.cloudflare.com/learning/access-management/what-is-mutual-tls/).
+:::
 
 ## Set up mTLS with your CA
 

src/content/partials/ssl/byo-ca-mtls-cert-requirements.mdx

@@ -29,8 +29,4 @@ import { Details } from "~/components"
 `x509.ECDSAWithSHA512`
 
 
-</Details>
-
-:::note
-Uploading the CA private key is only required if you wish to use [Zero Trust's block page](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/). For more context on how mTLS works, refer to our [Learning Center](https://www.cloudflare.com/learning/access-management/what-is-mutual-tls/).
-:::
+</Details>