Revocation is a much harder problem than the rest of the world wide PKI put together.

With a short enough expiry, you might not even need revocation. (See: DNSSEC.)