I wonder if any other certificates in the wild have the same fault? It seems unlikely that they wrote their own key/certificate generation software. Is there a bug in that software, or is there a way to mis-use it to create these weak private keys? Either way it seems possible to me that this is not an isolated incident.