Bunny is not a CA and doesn’t have those keys.

no it reads as if all individual private keys got compromised, hence requesting custom ssls to be updated