the only thing they need is to read the cert and confirm the auth of the issuer.

You just glossed over why this is a hard technical problem in the first place - They also need to check the cert isn’t revoked.

Otherwise, you can just hold onto a compromised cert, and reuse it.

Merit as a musician can only take you so far. In any creative career, the big famous artists aren’t just good at doing their craft, they’re also very good at making business deals to sell them. And even that’s not always enough to become a superstar, you also need luck - your breakout/masterpiece needs to coincide with the latest trend, and preferably early in your career - a one-hit-wonder might be enough, but maybe not.