draft

Author: msangapu-msft

articles/app-service/configure-ssl-certificate.md

@@ -311,18 +311,18 @@ After the certificate renews inside your key vault, App Service automatically sy
 
 ## Frequently asked questions
 
-#### How can I automate adding a bring-your-owncertificate to an app?
+### How can I automate adding a bring-your-owncertificate to an app?
 
 - [Azure CLI: Bind a custom TLS/SSL certificate to a web app](scripts/cli-configure-ssl-certificate.md)
 - [Azure PowerShell Bind a custom TLS/SSL certificate to a web app using PowerShell](scripts/powershell-configure-ssl-certificate.md)
 
-#### Can I use a private CA (certificate authority) certificate for inbound TLS on my app?
+### Can I use a private CA (certificate authority) certificate for inbound TLS on my app?
 You can use a private CA certificate for inbound TLS in an [App Service Environment version 3 (ASEv3)](./environment/overview-certificates.md). This isn't possible in App Service (multi-tenant).
 
-#### Can I make outbound calls using a private CA (certificate authority) client certificate from my app?
+### Can I make outbound calls using a private CA (certificate authority) client certificate from my app?
 This is only supported for Windows container apps in App Service. In addition, you can make outbound calls using a private CA client certificate with both code-based and container-based apps in an [App Service Environment version 3 (ASEv3)](./environment/overview-certificates.md).
 
-#### Can I configure a private CA (certificate authority) certificate on my app in App Service?
+### Can I configure a private CA (certificate authority) certificate on my app in App Service?
 You can load your own CA certificate into the Trusted Root Store in an [App Service Environment version 3 (ASEv3)](./environment/overview-certificates.md). You can't modify the list of Trusted Root Certificates in App Service (multi-tenant).
 
 ## More resources