Because certifications mean you can read a book and pass a test, unless the certs are similar to the OSCP ones which require some hands-on activity. Working through the Web Application Hacker's Handbook or the OWASP guides is a much better use of your time. When you're interviewing, you can talk about all the success you've had working through those projects, which shows hands-on, practical knowledge.