Received an invalid certificate

The certificate submitted in a PKINIT request is structurally invalid, has an invalid signature, or contains fields that are inconsistent with the Kerberos protocol.

References

rfc-editor.org/rfc/rfc4120

In this namespace

← previous KDC_ERR_ETYPE_NOSUPP KDC has no support for encryption type next → KDC_ERR_INVALID_SIG The signature is invalid

KDC_ERR_CLIENT_NAME_MISMATCH KDC_ERR_CLIENT_NOT_TRUSTED KDC_ERR_CLIENT_NOTYET KDC_ERR_CLIENT_REVOKED KDC_ERR_ETYPE_NOSUPP KDC_ERR_INVALID_CERTIFICATE KDC_ERR_INVALID_SIG KDC_ERR_KDC_NAME_MISMATCH KDC_ERR_KDC_NOT_TRUSTED KDC_ERR_KEY_EXPIRED KDC_ERR_KEY_TOO_WEAK