I'm not following. The issue is about it being used for the site the private key is for. The attacker's site is irrelevant here.