EAP-TLS fails on the iPhone

Profile generated using Apple Mobile Configurator2 for iPhone 6/7.

Profile contains 2 Certificates (Client and CA Root). CA Root is added to the Trust Store using https://support.apple.com/en-us/HT204477.

Using Diagnostics profile (https://developer.apple.com/bug-reporting/profiles-and-logs/?platform=ios), the device log shows. The first number is the line number in the WiFi log. What are the potential issues that can generate this error? I can provide over-the-air packet captures between the AP and the iPhone.