Tim:
Tangentially, I'm not sure of the value of expiring keys, other than for timebombing things.
Barry:
In the general case it puts a limit on how long a compromised key will be usable. Let’s encrypt keys only live for 3 months (?) for example.
If they've compromised it, couldn't *they* renew it, too?