So, @Azure had this issue for months (certificate
creation date for new entries is 2001). Let's see how long it takes them to fix,
when I use my paid support plan to tell them about this issue...