96C73A0D Ticket cannot be granted with requested properties.
Explanation
A Kerberos request cannot be processed because
one or more of the ticket options are either not supported or are
not allowed by the account policy. 
In the case of
using the PKINIT authentication, this error occurs if the end date
of the ticket exceeds that of the certificate set up for PKINIT. 
User response
Change the account policy if desired and then
retry the request. In the case of using the PKINIT
authentication, retry the request with an earlier end date or use
another certificate which has a later expiration date for PKINIT.