Certificate appears valid, but authentication fails
Validity period and chain are correct. Why is the certificate-based sign-in not accepted?
This evidence consists of synthetic examples created for teaching.
Evidence
Sertifika
Chain and time validity are successful in the example.Key
The client can produce proof of possession with the relevant private key.Purpose
In the example, the required usage purpose and CA acceptance conditions are satisfied.KDC
Strong account mapping check fails; there is only name similarity.Question
Which gate has the problem?