Ask HN: Why aren't websites adopting client certs in lieu of passwords?

In light of NIST's recent announcement, and several articles about password managers, why aren't sites being designed with client certs as an authentication or at least 2FA mechanism?