The time as Unix epoch when the required permissions to the Managed Identity were granted. SCEPman acquires a token using the Managed Identity only after a short delay (60 seconds in SCEPman 2.0) after this time, because only then do the roles in the token reflect the correct permissions added by the CMDlet. The tokens are cached for 24 hours with no way to force refresh the cache, so if you added a permission after SCEPman has acquired a token, you need to wait up to 24 hours until SCEPman can use this new permission.
Changes can harm your service!
The algorithm used to encrypt SCEP responses. Reasonable values include "2.16.8220.127.116.11.4.1.42" for AES-256-CBC (the default) and "2.16.818.104.22.168.4.1.2" for AES-128-CBC.