Hi,
Azure Key Vault certificate support provides for management of your X.509 certificates and the following behaviors:
- Allows a certificate owner to create a certificate through a key vault creation process or through the import of an existing certificate. Imported certificates include both self-signed certificates and certificates that are generated from a certificate authority (CA).
- Allows a Key Vault certificate owner to implement secure storage and management of X.509 certificates without interacting with private key material.
- Allows a certificate owner to create a policy that directs Key Vault to manage the lifecycle of a certificate.
- Allows a certificate owner to provide contact information for notifications about the lifecycle events of expiration and renewal.
- Supports automatic renewal with selected issuers: Key Vault partner X.509 certificate providers and CAs. Note Non-partnered providers and authorities are also allowed but don't support automatic renewal.
Please check this doc for more detail information https://learn.microsoft.com/en-us/azure/key-vault/certificates/about-certificates
Kindly accept answer if it helps
Please let us know if any more questions