Add tip to earlier section with xref

Author: Rand McKinney

docs/prod-cert.mdx

@@ -25,6 +25,10 @@ A CSR is just an unsigned certificate that's a template for the certificate that
 
 A CSR comprises a public key, as well as ["distinguished name" information](https://knowledge.digicert.com/general-information/what-is-a-distinguished-name) that identifies the individual or organization requesting the certificate. The distinguished name includes a common name, organization, city, state, country, and e-mail address. Not all of these fields are required and will vary depending with the assurance level of the desired certificate.
 
+:::tip
+For the C2PA [Verify tool](https://verify.contentauthenticity.org/) to display your organization name in the Content Credentials, your CSR must include the "O" or Organization Name attribute in the distinguished name information.  See [below](#organization-name) for details.
+:::
+
 You sign the CSR with your private key; this proves to the CA that you have control of the private key that corresponds to the public key included in the CSR. Once the requested information in a CSR passes a vetting process and domain control is established, the CA may sign the public key to indicate that it can be publicly trusted.
 
 ### Types of certificates
@@ -36,7 +40,7 @@ CAs offer a variety of different kinds of certificates (links below are to [Digi
 
 ### Organization name
 
-If you want the C2PA [Verify tool](https://verify.contentauthenticity.org/) to display your organization name in the Content Credentials, your certificate must include the "O" or [Organization Name attribute OID value: 2.5.4.10](https://www.alvestrand.no/objectid/2.5.4.10.html) in the Distinguished Name information. The CA may require some validation steps to prove you are part of that organization (details vary by CA).
+If you want the C2PA [Verify tool](https://verify.contentauthenticity.org/) to display your organization name in the Content Credentials, your certificate must include the "O" or [Organization Name attribute](https://www.alvestrand.no/objectid/2.5.4.10.html) (OID value 2.5.4.10) in the distinguished name information. The CA may require some validation steps to prove you are part of that organization (details vary by CA).
 
 ## The C2PA Python example