MQTT cannot connect with AWS IoT Core

I've got exactly the same thing, did exactly the same steps. Still getting a -2 error.

I've attached the Cert to the policy and to the Thing in AWS IoT Core.

Anything else I can do? Anything I can try with root cert?