That would require coordination with a certificate authority any time your IP changes, which could be very inconvenient in some cases. Meanwhile, DNS records a

That would require coordination with a certificate authority any time your IP changes, which could be very inconvenient in some cases. Meanwhile, DNS records already need to be updated if your IP changes anyway, so it is a logical place to put the authenticity information