They ran a project to try to modernize that but it is still very far behind. Many certs are manually updated and only discovered broken when they expired and due to 2 year max on azure (or is it 18 months) it's happening more and more now.