[456hdsaq234g]

Ive found many of these, and reported them to the vendors. Sometimes they are happy (swag!!!), sometimes they are not. This is a great article that explains the issue and work arounds.

Your friend is strings blah | grep PRIVATE KEY Run it over your fav bins today!

[schoen]

Note that you can also report it to the issuing CA if the vendor doesn't take action, and the CA will revoke the certificate.