It's because CRLs/OCSP sucks so now short expiration is rolling out.
But seems like there is feasible solution: https://hacks.mozilla.org/2025/08/crlite-fast-private-and-co...
Certificates are cached trust, and all the cache busting problem applies here.