On Tuesday 23 February 2027 at 4:00 am AEDT, the SSL certificates for Optus SMS Suite (*.sms.optus.com.au and sms.optus.com.au) will change to certificates issued by Amazon Trust Services through AWS Certificate Manager. We'll post a final confirmation here in early February.
Do I need to do anything? If your systems use the standard trust store provided by your operating system, runtime or browser, no action is needed. Amazon Trust Services certificates are already trusted there.
If you manage your own trust store, or your integration only accepts specific certificates (known as certificate pinning), you need to act before the change. Add the Amazon Trust Services root certificates listed at https://sms.optus.com.au/docs/en/integrations/api-documentation/ssl-certificates/ now, and keep your existing entries in place until the change is complete.
Which services are affected? The Optus SMS Suite web portal, REST API, SMPP and Email2SMS.
Why is this changing? Industry rules are steadily shortening certificate lifetimes to 100 days from March 2027 and 47 days from March 2029, and certificate chains now change routinely across all providers. Moving to automatically renewed certificates keeps the service secure without customers needing to act at every renewal.
We recommend trusting root certificates rather than individual leaf or intermediate certificates. From this change onward, we won't publish leaf or intermediate certificates, because they will change regularly.
SMPP connections will need to reconnect during the change; otherwise, we don't expect any interruption to service.