andretorresbr

The only different thing is that I ran nxc.exe within a remote PSSession (this fact generates a double hop issue, but nxc.exe does not seem to use the kerberos session,...

I confirm this. When trying to Pass-the-Cert using Rubeus, I receive this error:  Maybe both `mspki-certificate-application-policy` and `pKIExtendedKeyUsage` should be changed. Regards.