The Kerberos client received a KDC certificate that does not have KDC EKU (not based on Kerberos Authentication Template). ...