I would be explaining it here, however, I think the best information source in this case is still Microsoft itself:
Microsoft Developer Network - Service Principal Name
I try to explain it as simple as possible :)
In short:
It enables you to use the Windows Authentication method using the mutual Kerberos authentiction…