Or, the private key could leak. Or, the cert could have been issued by an authority which issued the cert despite compliance problems. Web PKI is different th

Or, the private key could leak. Or, the cert could have been issued by an authority which issued the cert despite compliance problems. Web PKI is different than code signing, but if you look at the discussions within the CAB forum, there are very good reasons to limit certificate lifetime.