Security is about tradeoffs. What's the benefit in rotating certificates, if the certificate is issued to the wrong entity? Though on a second thought I'm not

Security is about tradeoffs. What's the benefit in rotating certificates, if the certificate is issued to the wrong entity? Though on a second thought I'm not sure what you're getting at. Certificate renewal isn't optional. It's valid for however long it's valid.