Verifier side: human names for trusted issuer roots (IACA), shown as "Issued by " when the credential itself doesn't disclose its issuing authority (e.g. an age-only check).