I think you're joking, but at a certain point you're essentially getting live attestation from the CA, with the certificate duration only serving as sort of a c

I think you're joking, but at a certain point you're essentially getting live attestation from the CA, with the certificate duration only serving as sort of a caching function to enable faster responses by the server and to avoid overloading the CA. In that model, you might as well have much shorter duration certificates, with maybe the only limiting factor being the capacity of the CA.