To put it more succinctly: my private key has potentially been compromised, not my certificate. By generating a new private key (which implies a new certificate

To put it more succinctly: my private key has potentially been compromised, not my certificate. By generating a new private key (which implies a new certificate), I can protect against non-MITM eavesdropping for non-PFS ciphers.