SSL Certificates

info Important: The Optus SMS Suite is preparing to transition to certificates managed through AWS Certificate Manager (ACM) and Amazon Trust Services.
Customers using custom trust stores or certificate pinning should review the guidance below to ensure their integrations remain compatible following the migration.

Upcoming Migration to AWS Certificate Manager

The Optus SMS Suite is planning to migrate the SSL/TLS certificates for the following endpoints to AWS Certificate Manager:

  • *.sms.optus.com.au
  • sms.optus.com.au

The migration is currently proposed for 23 February 2027 at 4:00 am AEDT. Please refer to the status page for updates to the planned migration schedule.

AWS Certificate Manager automates certificate issuance and renewal, reducing the need for manual certificate management.

Most customers using standard operating system, runtime, or browser trust stores should not need to make changes, provided their environments trust the relevant Amazon Trust Services root certificates.

Customers using custom trust stores, certificate restrictions, or certificate pinning should review their configurations before the migration.

Updates and scheduled maintenance notifications will be published on the The Optus SMS Suite Status Page.

ACM Certificate Guidance

Following the migration, certificates for these hostnames will be issued and renewed through AWS Certificate Manager.

Do not pin the leaf certificate or an intermediate CA for these endpoints. ACM may rotate or reissue certificates, and Amazon Trust Services guidance is to trust the root public keys if your application must pin.

For custom trust stores, include the non-EU Amazon Trust Services roots listed below. We are not using the AWS European Sovereign Cloud ACM roots.

Amazon Trust Services Roots

Amazon Trust Services publishes its current roots and pinning guidance in the Amazon Trust Services repository. For ACM help, see the AWS Certificate Manager documentation.

Root CA Distinguished name SPKI SHA-256 Certificate
Amazon Root CA 1 CN=Amazon Root CA 1,O=Amazon,C=US fbe3018031f9586bcbf41727e417b7d1c45c2f47f93be372a17b96b50757d5a2 PEM / DER
Amazon Root CA 2 CN=Amazon Root CA 2,O=Amazon,C=US 7f4296fc5b6a4e3b35d3c369623e364ab1af381d8fa7121533c9d6c633ea2461 PEM / DER
Amazon Root CA 3 CN=Amazon Root CA 3,O=Amazon,C=US 36abc32656acfc645c61b71613c4bf21c787f5cabbee48348d58597803d7abc9 PEM / DER
Amazon Root CA 4 CN=Amazon Root CA 4,O=Amazon,C=US f7ecded5c66047d28ed6466b543c40e0743abe81d109254dcf845d4c2c7853c5 PEM / DER
Starfield Services Root Certificate Authority - G2 CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US 2b071c59a0a0ae76b0eadb2bad23bad4580b69c3601b630c2eaf0613afa83f92 PEM / DER

Current SSL/TLS Certificates

Until the planned migration is completed, the following certificates remain the current certificate details for these endpoints.

info If you manually store our SSL or Intermediate SSL certificates in a trust store, any future certificate changes will be communicated in advance via a scheduled maintenance post on our status page. We recommend subscribing to our status page to ensure you receive these notifications.

Intermediate CA Certificate

If at all possible we recommend you save the Intermediate CA certificate in your trust store rather than the certificate for the endpoint itself.

The CURRENT Intermediate CA certificate (made active on 2026-02-27) is as follows (in PEM format): 

-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIQDPW9BitWAvR6uFAsI8zwZjANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0yMTAzMzAwMDAwMDBaFw0zMTAzMjkyMzU5NTlaMFkxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMzAxBgNVBAMTKkRpZ2lDZXJ0IEdsb2Jh
bCBHMiBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMz3EGJPprtjb+2QUlbFbSd7ehJWivH0+dbn4Y+9lavyYEEV
cNsSAPonCrVXOFt9slGTcZUOakGUWzUb+nv6u8W+JDD+Vu/E832X4xT1FE3LpxDy
FuqrIvAxIhFhaZAmunjZlx/jfWardUSVc8is/+9dCopZQ+GssjoP80j812s3wWPc
3kbW20X+fSP9kOhRBx5Ro1/tSUZUfyyIxfQTnJcVPAPooTncaQwywa8WV0yUR0J8
osicfebUTVSvQpmowQTCd5zWSOTOEeAqgJnwQ3DPP3Zr0UxJqyRewg2C/Uaoq2yT
zGJSQnWS+Jr6Xl6ysGHlHx+5fwmY6D36g39HaaECAwEAAaOCAYIwggF+MBIGA1Ud
EwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFHSFgMBmx9833s+9KTeqAx2+7c0XMB8G
A1UdIwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdgYIKwYBBQUHAQEEajBoMCQG
CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQAYIKwYBBQUHMAKG
NGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RH
Mi5jcnQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA9BgNVHSAENjA0MAsGCWCGSAGG/WwC
ATAHBgVngQwBATAIBgZngQwBAgEwCAYGZ4EMAQICMAgGBmeBDAECAzANBgkqhkiG
9w0BAQsFAAOCAQEAkPFwyyiXaZd8dP3A+iZ7U6utzWX9upwGnIrXWkOH7U1MVl+t
wcW1BSAuWdH/SvWgKtiwla3JLko716f2b4gp/DA/JIS7w7d7kwcsr4drdjPtAFVS
slme5LnQ89/nD/7d+MS5EHKBCQRfz5eeLjJ1js+aWNJXMX43AYGyZm0pGrFmCW3R
bpD0ufovARTFXFZkAdl9h6g4U5+LXUZtXMYnhIHUfoyMo5tS58aI7Dd8KvvwVVo4
chDYABPPTHPbqjc1qCmBaZx2vN4Ye5DUys/vZwP9BFohFrH/6j/f3IL16/RZkiMN
JCqVJUzKoZHm1Lesh3Sz8W2jmdv51b2EQJ8HmA==
-----END CERTIFICATE-----

Additional certificate info:

  • Serial Number: 0c:f5:bd:06:2b:56:02:f4:7a:b8:50:2c:23:cc:f0:66
  • Validity:
    • Not Before: Mar 30 00:00:00 2021 GMT
    • Not After: Mar 29 23:59:59 2031 GMT

Leaf SSL Certificate

warning Pinning against the leaf certificate is not recommended. Leaf certificates can change during renewal, reissue, or service migration. Prefer the Intermediate CA certificate above where your application requires a custom trust store.

The CURRENT SSL certificate for *.sms.optus.com.au (made active on 2026-09-09) is as follows (in PEM format): 

-----BEGIN CERTIFICATE-----
MIIIAzCCBuugAwIBAgIQC0FzNbS3dfU1ajmGsqN2QzANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjYw
ODEzMDAwMDAwWhcNMjcwMjI3MjM1OTU5WjB9MQswCQYDVQQGEwJBVTEYMBYGA1UE
CBMPTmV3IFNvdXRoIFdhbGVzMRcwFQYDVQQHEw5NYWNxdWFyaWUgUGFyazEeMBwG
A1UEChMVT3B0dXMgU3lzdGVtcyBQdHkgTHRkMRswGQYDVQQDDBIqLnNtcy5vcHR1
cy5jb20uYXUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDIYskXl25K
gdGI5GHXcZtbBQEjpHxaEIVrdoge1ZmU8KVQs8Ps6Jy5rNU51NKj9zrGPRxLHGEO
+FMI5OtDydgNg1bFFycfmQc8cVjUVRKC6dLjlY7bxic4PcSc25zm3q08nY8JbnWf
jP/5XmiDIOIrEjOw4mFqz0FEPgUNNmJXLl5Cei6Q5zAbL+SNF5B0rPJGjH1eeW03
vjmlQ6+Z0x+jnht8BOPAUe9qu2SbhdlBS066hyC+DqjzdmjgYpgAUhytlxNntULH
eZ6Gx//YhdJimya4zTmfQivOGTsm7D60r8TmZGY7PXrqCZIASHUmCzoJcqZkmmGd
lzTdfFJQb4CaG2xZoFoYUXk+BQZhE06HzqGZczwUp9TCCtNKGdwWjAA2AUntzydn
p1lty/Ejvob8MO1icrb/xEuoIouTaE6ZnpIWpOT3sZ7KId0t+td/NzoF+Q+m/A2w
hPq60u8PLz+sthiXJRQfvZI5lv2bCQmiU4O3P7wB9zI3SqjLhZL4D1OVz645nCBs
JkdGb6oWNiYbHpEb7tco44A7odBFmPn+8iPzI02CmydJX4r1cywTs4xTHDUJ6rpc
4RKb5nFD6rUVWW/JL1W0t356qi4EsROxM4GE5sokspANYCvOSffCFRaK9PcSS+TE
IokOLUcvYpoACxOPjMEFeN7UYo58uiO7vwIDAQABo4IDoTCCA50wHwYDVR0jBBgw
FoAUdIWAwGbH3zfez70pN6oDHb7tzRcwHQYDVR0OBBYEFJ2Ck5EX50MSC8H0v0UE
69tfDr+EMC8GA1UdEQQoMCaCEiouc21zLm9wdHVzLmNvbS5hdYIQc21zLm9wdHVz
LmNvbS5hdTA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRw
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRw
Oi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1
NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9E
aWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDCBhwYIKwYB
BQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20w
UQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy
dEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAA
MIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgBMY9yY5Zwdq4j2Hoo93q6Pq0Sj
N3tfm5TD+6Gc/MG+JgAAAZ/5xPPrAAAEAwBHMEUCIQD6U6VNRjKocb7ULZ6LF6WS
kTCiVkz/YuN0S+6nXD469AIgCZSQ+jRjDwZ+KxVZn0NiAorhLuTSY6Oa4RyH6P4O
ZHcAdwDW1Y2p0BdT82pKoMdXSQKv68fcLNOM2fdkyAyJGR6fAgAAAZ/5xPO6AAAE
AwBIMEYCIQDqObMBwai5r1GGEwW5VDp6ixXb+iz27A8fX65XhIr/tQIhAN09mV4K
k8HyGHV1wQ6pcgSHpGaHgnfSjuub1cuXxLatAHYAHJ9oLOn68EVpUPgbloqH3dsy
ENhM5siy44JSSsTPWZ8AAAGf+cT0gQAABAMARzBFAiBzT82HwRowtTs09ulV3NZS
gyH2ZvBIUjKclaxPwM3ftQIhAMrgaHw6ImR5YVCpeqee29C7vjw6Os8a+dJZbLiZ
KZuFMA0GCSqGSIb3DQEBCwUAA4IBAQAcx+2dH9kNScjN2Egy4rEZlGoo6ZvvKHvM
kIkYpPLO4oFc5u4GHD0VRsgCzLWILM7/gnhbV3If5vB2pQz6F8qO5prIadv/h1kl
pLbqUJlljaBxJ0oDvTpvsZ2Yju2v4eHDgO/XlPImftewaejRnZbIRVeFXscsXksZ
WcuNiJR1r2kuwogSoxyUMNiCJKu4dw5XPj6+nq/yqnsWdRXtR5KNLZcpyvgA6/KK
K4JCFHJgbt/MGqJ93iv5KDZZywn7Pkn8YYy2zlvo1Wfl2qiLqzVG3HUwRzsdsuPY
8HHob6YvT879B9RgCxzrh1ylnT8DDX90acCq3XL4RIlOw69jyVi5
-----END CERTIFICATE-----

Additional certificate info:

  • Serial Number: 0B417335B4B775F5356A3986B2A37643
  • Validity:
    • Not Before: Aug 13 00:00:00 2026 GMT
    • Not After: Feb 27 23:59:59 2027 GMT