SPN inspector
Paste an SPN. Get it parsed and explained.
Everything happens in your browser; nothing is sent anywhere. Without JavaScript, the anatomy below still explains each part.
{{ cls }}service class
/
{{ host }}{{ hostKind }}
:
{{ port }}{{ portKind }}
what this tells you
{{ n.mark }}{{ n.text }}
provider
the anatomy, without JavaScript
- service class
- What kind of service: MSSQLSvc, HTTP, HOST, TERMSRV, WSMAN, CIFS, MSOLAPSvc.3, oracle, SAP. Case-insensitive in Kerberos, but registered as typed.
- host
- The name the client will actually use. FQDN and NetBIOS short name are different SPNs; most services need both. A CNAME alias needs its own.
- port
- Only for classes that carry one. MSSQLSvc carries the TCP port for non-default instances. HTTP never carries 80 or 443. MSOLAPSvc.3 never carries a port; a colon suffix there is the instance name.
- service name (fourth part)
- Rare. Some classes allow class/host:port/name. Not modelled by most providers.