Yeah. But if you can afford to store a certificate of that size you can afford to store the password. Also worth noting that for most types of certificate (like

Yeah. But if you can afford to store a certificate of that size you can afford to store the password. Also worth noting that for most types of certificate (like RSA where 2048 bit keys are common) there is much less than 2048 bits of entropy. So in practice the numbers probably end up much closer.