../spn

SPN

An SPN (Service Principal Name) is a unique id to designate an instance of a service inside an AD environnement. it’s used to allow an app to contact a service for an account without the name of the account.

His simplest form is

service_class/hostname

to add details you can also specify a port and a name, then it look like this.

service_class/hostname:port/name

You can find the SPN inside kerberos tickets

Client Name : user@DOMAIN.TLD
Service Principal : Class/machine.DOMAIN.TLD:69420/Servicename
Ticket Flags : forwardable, renewable
AuthTime : 2025-09-30 10:12:34
StartTime : 2025-09-30 10:12:34
EndTime : 2025-09-30 20:12:34

The built-in class are available here

Exception