1. you would require access to the user's system in order to gain access to the private key of the cert

2. it provides better security than username/password authentication

3. it makes our lifes easier because you wouldn't have to remember passwords