You need to enable 'AllowDotlessSpn' flag in order to use dotless SPN '{0}'. Please make sure you have set extended protection ...