Censys expands queries to provide additional functionality. For example, the query a:zmap.io
executes a DNS lookup and expands to ip:141.212.120.90.
Your query was changed from:
443.https.tls.chain.parsed.fingerprint_sha256: efd7b26fc711fe77d9684f7679ac1b4246627e76a8d439e568cb49b72e731b30 or 443.https.tls.certificate.parsed.fingerprint_sha256: efd7b26fc711fe77d9684f7679ac1b4246627e76a8d439e568cb49b72e731b30
to
443.https.tls.chain.parsed.fingerprint_sha256: efd7b26fc711fe77d9684f7679ac1b4246627e76a8d439e568cb49b72e731b30 OR 443.https.tls.certificate.parsed.fingerprint_sha256: efd7b26fc711fe77d9684f7679ac1b4246627e76a8d439e568cb49b72e731b30
If this isn't what you intended, you can run your raw query without expansion.