Censys expands queries to provide additional functionality. For example, the query a:zmap.io
executes a DNS lookup and expands to ip:18.104.22.168.
Your query was changed from:
(3389.rdp.banner.tls.certificate.parsed.issuer_dn: "CN=SolarWinds-Orion" ) AND location.country: "France"
If this isn't what you intended, you can run your raw query without expansion.