One credential instance, backed by an existing platform wallet key.
Holder DID associated with the key when the issuer requires DID binding.
Existing wallet signing key identifier; constructing a binding does not generate a key.