AT+KCERTSTORE, +CME ERROR: 929

I am issuing this sequence where red is received:
AT+KCERTSTORE=0,1213,0
CONNECT
<send 1213 bytes of .der format certificate>
+CME ERROR: 929

Is there something other than the .der certificate needed?

The certifcate must be in ascii .crt format and not .der