updated steps and links"

Author: MGoedtel

articles/aks/certificate-rotation.md

@@ -40,19 +40,19 @@ Certificates mentioned above are maintained by Microsoft, except the cluster cer
 > kubectl config view --raw -o jsonpath="{.users[?(@.name == 'clusterUser_rg_myAKSCluster')].user.client-certificate-data}" | base64 -d | openssl x509 -text | grep -A2 Validity
 > ```
 
-* To check expiration date of apiserver certificate, run the following command:
+To check expiration date of apiserver certificate, run the following command:
 
 ```console
 curl https://{apiserver-fqdn} -k -v 2>&1 |grep expire
 ```
 
-* To check the expiration date of certificate on VMAS agent node, run the following command:
+To check the expiration date of certificate on VMAS agent node, run the following command:
 
 ```azurecli
 az vm run-command invoke -g MC_rg_myAKSCluster_region -n vm-name --command-id RunShellScript --query 'value[0].message' -otsv --scripts "openssl x509 -in /etc/kubernetes/certs/apiserver.crt -noout -enddate"
 ```
 
-* To check expiration date of certificate on one virtual machine scale set agent node, run the following command:
+To check expiration date of certificate on one virtual machine scale set agent node, run the following command:
 
 ```azurecli
 az vmss run-command invoke -g MC_rg_myAKSCluster_region -n vmss-name --instance-id 0 --command-id RunShellScript --query 'value[0].message' -otsv --scripts "openssl x509 -in /etc/kubernetes/certs/apiserver.crt -noout -enddate"