SpnManager/inspector
Kerberos broken now? →
SPN inspector

Paste an SPN and see how it breaks down.

Everything happens in your browser; nothing is sent anywhere. Without JavaScript, the anatomy below still explains each part.

MSSQLSvcservice class
/
sql01.corp.example.comhost — FQDN
:
1433port
what this tells you
+Class MSSQLSvc maps to SQL.Engine.
·Host is an FQDN. Most services also need the NetBIOS short-name variant (sql01) for clients that connect by short name.
+SQL Server TCP port. Also register the portless variant and both host forms.
provider
SQL.EngineSQL Server Database Enginecatalog →

the anatomy, without JavaScript
service class
What kind of service: MSSQLSvc, HTTP, HOST, TERMSRV, WSMAN, CIFS, MSOLAPSvc.3, oracle, SAP. Case-insensitive in Kerberos, but registered as typed.
host
The name the client will actually use. FQDN and NetBIOS short name are different SPNs; most services need both. A CNAME alias needs its own.
port
Only for classes that carry one. MSSQLSvc carries the TCP port for non-default instances. HTTP never carries 80 or 443. MSOLAPSvc.3 never carries a port; a colon suffix there is the instance name.
service name (fourth part)
Rare. Some classes allow class/host:port/name. Not modelled by most providers.