“The district court never explained what in the record supported its conclusion that the cease-and-desist order was just and proper,” Judge Richard Wesley wrote for the Second Circuit.