96C73A4B Kerberos client name does not match name bound to the client certificate.
Explanation
The Kerberos client name in the AS-REQ request does not match a name bound by the KDC or if there is no binding found by the KDC.
User response
Use a certificate with the matching name in the Subject Alternate Name field.