[nodata]

i.e. they re-used the same CSR without realising that the CSR references the old compromised key.