...
Because one or more registry-level certificates are present, the Device
resource must meet the device certificate requirements.
The
Device.credentials[i].public_key.key
field must be set to the device public key certificate’s contents (including the header and footer).The
Device.credentials[i].public_key.format
field must be set toRSA_X509_PEM
orES256_X509_PEM
.