Well, all eight of the compromised certificates had keys which were < 256. So a really poor choice of range.

This is actually interesting. I'm no cryptographer. Do modern algorithms take into account that certain values should be avoided because they would be obvious things to try first in a brute force attack?