It will involve a far more restrictive list of requirements to validate the KDC's certificate, mainly it needs a KDC certification using an EKU of “KDC Authentication” (see alternative b. higher than).  Alternatively, non-proportional cession happens when the reinsurer only p