Freshness pass: Certificate rotation in AKS

schaffererin · schaffererin · commit 2fd80cd9a486 · 2023-09-25T13:39:50.000-07:00
diff --git a/articles/aks/certificate-rotation.md b/articles/aks/certificate-rotation.md
@@ -33,7 +33,9 @@ AKS generates and uses the following certificates, Certificate Authorities (CA),
 All certificates mentioned in this section, except for the cluster certificate, are maintained by Microsoft.
 
 > [!NOTE]
-> AKS clusters created prior to May 2019 have certificates that expire after two years. Any cluster created after May 2019 or any cluster that has its certificates rotated have Cluster CA certificates that expire after 30 years. All other AKS certificates, which use the Cluster CA for signing, expired after two years and were automatically rotated during an AKS version upgrade which occurred after 8/1/2021.
+>
+> * **AKS clusters created *before* May 2019** have certificates that expire after two years.
+> * **AKS clusters created *after* May 2019** have Cluster CA certificates that expire after 30 years.
 >
 > You can verify when your cluster was created using the `kubectl get nodes` command, which shows you the *Age* of your node pools.
 

Original file line number	Diff line number	Diff line change
`@@ -33,7 +33,9 @@ AKS generates and uses the following certificates, Certificate Authorities (CA),`
`33`	`33`	`All certificates mentioned in this section, except for the cluster certificate, are maintained by Microsoft.`
`34`	`34`
`35`	`35`	`> [!NOTE]`
`36`		`-> AKS clusters created prior to May 2019 have certificates that expire after two years. Any cluster created after May 2019 or any cluster that has its certificates rotated have Cluster CA certificates that expire after 30 years. All other AKS certificates, which use the Cluster CA for signing, expired after two years and were automatically rotated during an AKS version upgrade which occurred after 8/1/2021.`
	`36`	`+>`
	`37`	`+> * *AKS clusters created before* May 2019** have certificates that expire after two years.`
	`38`	`+> * *AKS clusters created after* May 2019** have Cluster CA certificates that expire after 30 years.`
`37`	`39`	`>`
`38`	`40`	> You can verify when your cluster was created using the `kubectl get nodes` command, which shows you the Age of your node pools.
`39`	`41`