Document to which new credentials belong
if this is a newly issued document (as opposed to refreshed credentials)