I'm by no means an expert, but the difference between passwords and certs is that certs can be used without any interaction with the authority. A leaked passwo

I'm by no means an expert, but the difference between passwords and certs is that certs can be used without any interaction with the authority. A leaked password will reveal itself to the authority when used. You have to connect to something to use it and when doing so, can be flagged. A long lived certificate and key can be used with no interaction with the authority, so how do you know that it is being used maliciously? The renewal is the interaction with the authority which could pick up malicious activity, so making it more regular is beneficial.