do I need to create a new cert record if the Extended Key Usage List gets modified due to MS rule
4900 SBC
key-usage-list digitalSignature keyEncipherment extended-key-usage-list serverAuth key-algor rsa digest-algor sha256 ecdsa-key-size p256 cert-status-profile-list options
this is the notice from MS
SBC certificates EKU extensions test
On March 5, 2024 (starting 9 AM UTC), Microsoft will conduct a 24-hour test of its infrastructure. During this time, Session Border Controllers (SBCs) certificates are required to include both Client and Server Authentication for their Extended Key Usage (EKU) extensions. We kindly ask that you ensure that the EKU extension of your certificate includes Server Authentication and Client Authentication to avoid any service degradation.
If your SBCs certificate EKU extension doesn't include both Server and Client Authentication, your SBCs will not be able to connect with Microsoft infrastructure.