Well, all eight of the compromised certificates had keys which were < 256. So a really poor choice of range.