Or, like almost any company that's reasonably competent, they have multiple certificates with different private keys.