PKINIT KDC name mismatch

The KDC name in the PKINIT certificate does not match the KDC's actual principal name. The client cannot verify that the KDC is the intended recipient.

References

rfc-editor.org/rfc/rfc4120

In this namespace

← previous KDC_ERR_INVALID_SIG The signature is invalid next → KDC_ERR_KDC_NOT_TRUSTED KDC is not trusted

KDC_ERR_CLIENT_NOTYET KDC_ERR_CLIENT_REVOKED KDC_ERR_ETYPE_NOSUPP KDC_ERR_INVALID_CERTIFICATE KDC_ERR_INVALID_SIG KDC_ERR_KDC_NAME_MISMATCH KDC_ERR_KDC_NOT_TRUSTED KDC_ERR_KEY_EXPIRED KDC_ERR_KEY_TOO_WEAK KDC_ERR_MUST_USE_USER2USER KDC_ERR_NAME_EXP