It's different because this was "internal testing" and the certificate wasn't used (at least, this is not mentioned). CNNIC issued a CA cert to some random intermediary. Slight difference in severity.