readerCertificateSha256

Exact certificate identity; display names or CA membership alone never identify the recipient.