It involves a more restrictive list of criteria to validate the KDC's certificate, primarily it requires a KDC certificate with the EKU of “KDC Authentication” (see choice b. above).  Invicta also encourages end users to have interaction Using the hashtag #InvictaWatch, makin