certificates can be stolen or hacked. Authentication needs to have some real-time component if it is to be completely secure. I like having to use a combination PIN/Password and a 6 digit code (that is constantly changing) to access my banking accounts. That with perhaps a machine identity or certificate would present very accurate signature that identifies me as a client.