cannot connect with tls to Redis Cloud

I followed both examples with the credentials generated here (tried with both "enforce client authentication" options)

I am able to successfully using redis-cli

But when I try to login using node-redis:

createClient({
      url,
      socket: {
        tls: true,
        cert: readFileSync(
          'redislabs_credentials/redislabs_user.crt',
        ),
        ca: readFileSync(
          'redislabs_credentials/redislabs_ca.pem',
        ),
      },
    });

I get:

ReplyError: ERR unencrypted connection is prohibited
    at parseError (/Users/mayas/bold/core/node_modules/redis-parser/lib/parser.js:179:12)
    at parseType (/Users/mayas/bold/core/node_modules/redis-parser/lib/parser.js:302:14)

Environment:

• Node.js Version: 16.3
• Redis Server Version: 6.2.3
• Node Redis Version: 4.0.4
• Platform: Mac OS 11.4

Start with the TLS examples in docs/client-configuration.md and the createClient configuration shown in the report; compare the supplied certificate options with the successful redis-cli connection. Trace the reported error through redis-parser and verify the client can connect to Redis Cloud without receiving “ERR unencrypted connection is prohibited.”