Point the apex (and www if used) at the org docs/site host — typically GitHub Pages for openshellorg.github.io, or a dedicated Pages project — so {OSO} Certified - opensh.org resolves.
Until DNS is live, the certification string still uses opensh.org as the intended public URL.