Cloud Access Manager will only support base64 encoded certificates, (with the exception of importing a PKCS12 for this-server), both .crt and .cer files can be either PEM encoded (base64) or DER encoded (raw binary file), Cloud Access Manager will only support them if they are PEM encoded.