TLS certificate rotation for REST API endpoints on September 9, 2026
Twilio will rotate the end-user TLS certificate for all REST API endpoints on September 9, 2026. Only the end-user certificate will be renewed while root and intermediate certificates remain unchanged. Most customers won't be affected unless they manually pin certificates.
On September 9, 2026, Twilio will rotate the end-user TLS certificate for all REST API endpoints. Only the end-user certificate and certificate serial number will be renewed; root and intermediate certificates will remain the same.
This is a routine update that won’t impact most customers unless they’re pinning certificates or are managing them manually. Customers using the Twilio Helper Libraries don’t need to take any action since the change will be handled automatically.
Twilio recommends against certificate pinning because it creates potential security risks, can cause downtimes for services, and a higher probability of failed API requests.
How to test your connection
The new certificate will be available for testing at https://tls-test.twilio.com starting August 12, 2026. If the request succeeds with a 200 OK, no further action is required.
Need a hand?
These resources have more detail:
Source: original entry ↗
More from Twilio
Follow Twilio to get its new changes in your feed and email digest.
Voice Integrity now supports all three major US networks
Voice Integrity, part of Twilio's Voice Trust offering, now supports all three major US carrier networks. Businesses can register their details and outbound phone numbers directly with carriers to help identify legitimate traffic and reduce spam blocking.
Unified Login for SendGrid Marketplace Customers
SendGrid marketplace customers can now create individual Twilio logins for each user, enabling granular permission management instead of shared admin access. This rollout applies to all marketplace integrations including Azure, Google Cloud, Heroku, and AWS.
Webhook Configuration API is now Generally Available
The Webhook Configuration API enables customers to configure authentication and delivery settings for outbound webhooks on a per-URL basis through Webhook Settings and Webhook Rules resources.