Here was me thinking it was at least going to be nonce reuse and I’d have to dig out some leaf certs from CT logs. No. 8-bit private keys. Sigh.