I am curious to know which encoding is used for jsessionid. 

The jsessionid value always contains only alphanumeric characters but nothing else, which makes that kind of encoding safer to user in URLs.