fix tabs

Author: cephalin

articles/app-service/app-service-web-tutorial-custom-domain.md

@@ -89,7 +89,7 @@ Create two records according to the following table:
 
 # [Subdomain (e.g. www.contoso.com)](#tab/subdomain)
 
-# [With an A record](#tab/subdomain/a)
+### [With an A record](#tab/subdomain/a)
 
 Create two records according to the following table:
 
@@ -100,7 +100,7 @@ Create two records according to the following table:
 
 ![Screenshot that shows a DNS records subdomain page.](./media/app-service-web-tutorial-custom-domain/a-record-subdomain.png)
 
-# [With a CNAME record](#tab/subdomain/cname)
+### [With a CNAME record](#tab/subdomain/cname)
 
 Create two records according to the following table:
 
@@ -111,7 +111,7 @@ Create two records according to the following table:
 
 ![Screenshot that shows the portal navigation to an Azure app.](./media/app-service-web-tutorial-custom-domain/cname-record.png)
 
----
+-----
 
 # [Wildcard (CNAME)](#tab/wildcard)
 

articles/app-service/tutorial-secure-domain-certificate.md

@@ -143,7 +143,7 @@ The App Service managed certificate doesn't expire as long as it's configured fo
 
 #### What else can I do with the App Service managed certificate for my app?
 
-The managed certificate is provided for free for the sole purpose of securing your app's configured custom domain. To do more, such as download the certificate, or use it in your application code, you can upload your own certificate, purchase an App Service certificate, or import a Key Vault certificate. For more information, see [Add a private certificate to your app](configure-ssl-certificate.md).
+The managed certificate is provided for free for the sole purpose of securing your app's configured custom domain. It comes with [a number of limitations](configure-ssl-certificate.md#create-a-free-managed-certificate). To do more, such as download the certificate, or use it in your application code, you can upload your own certificate, purchase an App Service certificate, or import a Key Vault certificate. For more information, see [Add a private certificate to your app](configure-ssl-certificate.md).
 
 #### How do I use a certificate I already have to secure my custom domain?