Recently I came across a peculiar AD PKI environment where PKINIT is not supported. Check the below snippet, redacting the domain name for obvious reasons.
🔥\> python3 ~/tools/PKINITtools/gettgtpkinit.py -cert-pfx administrator.pfx 'ippo.local/admin...