SSH keys are the best way of logging into Linux servers. But traditional keys have their limitations. They never expire Organizations commonly have workers that need access access to a system for a limited time, employees, move on etc. Managing this is possible by by removing keys as needed but SSH certificates have an expiry date built right into them. You even can issue new daily certificates to everyone every morning making them worthless the following day.
