If you build a system which relies on WebPKI certificates and you don’t have the ability to quickly replace those certificates, your system is insecure and will

If you build a system which relies on WebPKI certificates and you don’t have the ability to quickly replace those certificates, your system is insecure and will break. This is fairly central to how the entire concept of a publicly trusted CA works.