designated => (
	certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */
or
	certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */
	and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */
	and certificate leaf[subject.OU] = KUU2LM7U9K
)
and anchor apple generic
and identifier "uk.co.opencommunity.vienna2"

designated => (
	certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */
or
	(
		certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */
		and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */
		and certificate leaf[subject.OU] = KUU2LM7U9K
	)
)
and anchor apple generic
and identifier "uk.co.opencommunity.vienna2"

Format for better readability for adding additional certs in the future.
Format for better readability for adding additional certs in the future.