It consists of a more restrictive list of standards to validate the KDC's certificate, mostly it needs a KDC certification by having an EKU of “KDC Authentication” (see solution b. earlier mentioned).  which incorporates the “Server Authentication” EKU. It can be