Dynalist lets you nest things infinitely, so nothing is too big to fit into it.
identifier "io.dynalist" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "6JSW4SJWN9"