reader
The reader's key in the KeyStore and its PEM certificate chain, leaf first: with both, requests are signed (reader authentication), so holders see who is asking. The leaf should carry the mdoc reader authentication extended key usage (1.0.18013.5.1.6).