apply review feedback

Author: cristipogacean

articles/iot-operations/discover-manage-assets/howto-configure-opcua-certificates-infrastructure.md

@@ -27,7 +27,7 @@ A deployed instance of Azure IoT Operations Preview. To deploy Azure IoT Operati
 
 ## Configure a self-signed application instance certificate
 
-The default deployment of the connector for OPC UA installs all the resources needed by [cert-manager](https://cert-manager.io/) to create an OPC UA compliant certificate. A self-signed CA is used to sign this certificate. The application instance certificate is stored in the `aio-opc-opcuabroker-default-application-cert` secret while the CA certificate is stored in `aio-opc-opcuabroker-default-root-ca-cert` secret. `aio-opc-opcuabroker-default-application-cert` secret is mapped into all the connector for OPC UA pods and acts as the OPC UA client application instance certificate. `cert-manager` handles the automatic renewal of both application instance certificate and the self signed CA.
+The default deployment of the connector for OPC UA installs all the resources needed by [cert-manager](https://cert-manager.io/) to create an OPC UA compliant certificate. A self-signed CA is used to sign this certificate. The application instance certificate is stored in the `aio-opc-opcuabroker-default-application-cert` secret while the CA certificate is stored in `aio-opc-opcuabroker-default-root-ca-cert` secret. The `aio-opc-opcuabroker-default-application-cert` secret is mapped into all the connector for OPC UA pods and acts as the OPC UA client application instance certificate. `cert-manager` handles the automatic renewal of both the application instance certificate and the self signed CA.
 
 This configuration is typically sufficient for compliant and secure communication between your OPC UA servers and the connector for OPC UA in a demonstration or exploration environment. For a production environment, use enterprise grade application instance certificates in your deployment.
 
@@ -208,9 +208,9 @@ If your OPC UA server uses a certificate issued by a CA, but you don't want to t
 
 ## Configure your OPC UA server
 
-To complete the configuration of the application authentication mutual trust, you need to configure your OPC UA server to trust the connector for OPC UA application instance certificate together with it's issuer trust chain:
+To complete the configuration of the application authentication mutual trust, you need to configure your OPC UA server to trust the connector for OPC UA application instance certificate together with its issuer trust chain:
 
-1. To extract the public key certificate for OPC UA connector into a `opcuabroker.crt` file, run the following command:
+1. To extract the public key certificate for the OPC UA connector into a `opcuabroker.crt` file, run the following command:
 
     # [Bash](#tab/bash)
 
@@ -226,7 +226,7 @@ To complete the configuration of the application authentication mutual trust, yo
 
     ---
 
-2. To extract the CA public key certificate for OPC UA connector into a `opcuabroker-ca.crt` file, run the following command:
+1. To extract the CA public key certificate for the OPC UA connector into a `opcuabroker-ca.crt` file, run the following command:
 
     # [Bash](#tab/bash)
 
@@ -242,14 +242,14 @@ To complete the configuration of the application authentication mutual trust, yo
 
     ---
 
-3. Many OPC UA servers only support certificates in the DER format. If necessary, use the following command to convert the _opcuabroker.crt_ and _opcuabroker-ca.crt_ certificates to _opcuabroker.der_ and _opcuabroker-ca.der_:
+1. Many OPC UA servers only support certificates in the DER format. If necessary, use the following command to convert the _opcuabroker.crt_ and _opcuabroker-ca.crt_ certificates to _opcuabroker.der_ and _opcuabroker-ca.der_:
 
     ```bash
     openssl x509 -outform der -in opcuabroker.crt -out opcuabroker.der
     openssl x509 -outform der -in opcuabroker-ca.crt -out opcuabroker-ca.der
     ```
 
-4. Consult the documentation of your OPC UA server to learn how to add the `opcuabroker.crt` or `opcuabroker.der` certificate file to the server's trusted certificates list, respectively the `opcuabroker-ca.crt` or `opcuabroker-ca.der` CA certificate file into the server's trusted issuers list.
+1. Consult the documentation of your OPC UA server to learn how to add the `opcuabroker.crt` or `opcuabroker.der` certificate file to the server's trusted certificates list, and the `opcuabroker-ca.crt` or `opcuabroker-ca.der` CA certificate file into the server's trusted issuers list.
 
 ## Configure an enterprise grade application instance certificate