English language only, please. Furthermore this discussion thread belongs to the SAP Single Sign-On space.
To me it looks like you are trying to setup certificate based SSO but you are using the Kerberos syntax. Which one are you trying to configure? If you want to use the Kerberos based SSO, you will have to create the Kerberos keytab with sapgenpse, STRUST can't be used. If you want to use the certificate based SSO, you need to use the correct SNC name (the one you input while creating the certificate).