Censys expands queries to provide additional functionality. For example, the query a:zmap.io
executes a DNS lookup and expands to ip:141.212.120.90
.
Your query was changed from:
443.https.tls.chain.parsed.fingerprint_sha256: 4f6ff886b754f233548b75895c276837327c74f409668ad76d3a9c663220d8eb or 443.https.tls.certificate.parsed.fingerprint_sha256: 4f6ff886b754f233548b75895c276837327c74f409668ad76d3a9c663220d8eb
to
443.https.tls.chain.parsed.fingerprint_sha256: 4f6ff886b754f233548b75895c276837327c74f409668ad76d3a9c663220d8eb OR 443.https.tls.certificate.parsed.fingerprint_sha256: 4f6ff886b754f233548b75895c276837327c74f409668ad76d3a9c663220d8eb
If this isn't what you intended, you can run your raw query without expansion.