Objective
Your shortened links are served over HTTPS, which needs a TLS certificate for the domain you attached to the Messaging Service. This article shows you how to let Twilio manage that certificate, or upload your own, and how to check the certificate you already have.
Product
Programmable Messaging
Environment
Twilio Console
Procedure
- In the Twilio Console, select Communications in the left sidebar.
- Select Messaging, then Services.
- Select the Messaging Service, open the Add-ons tab, then select Manage on the Link shortening with click tracking card.
- Scroll to the Certificate management section. What you see depends on whether a certificate already exists.
- If no certificate exists yet, under Choose how you would like your domain certificate managed pick one option:
- Twilio-managed certificate (Recommended), confirm in the dialog and Twilio requests and renews the certificate for you. Twilio confirms with Managed certificate requested successfully.
- Bring your own certificate, confirm in the dialog, then on Upload TLS certificate and private key paste your certificate into TLS certificate and your key into Private key, and select Upload. Twilio confirms with Certificate uploaded successfully.
- If a certificate already exists, the section shows Current Certificate with its Status, Certificate SID, Domain SID, Domain name, Created date, Last updated date, and Expiration date. From here you can:
- Select Upload new certificate to replace your own certificate with a newer one.
- Select Switch to Twilio managed certificate to hand renewal over to Twilio.
- Select Send a test message to check the domain end to end.
Additional Information
- The certificate section only appears once a domain is selected and saved on the Link shortening page.
- A Twilio-managed certificate is the recommended option because Twilio handles issuance and renewal. Choose Bring your own certificate only if you must use a certificate from your own authority.
- TLS certificate expects the full PEM-formatted certificate beginning with the certificate header line, and Private key the matching PEM private key.
- While a replacement is being issued, the section also shows a New Certificate block with its own Status and Expiration date alongside the current one.
- Watch the Expiration date on your own certificates, an expired certificate stops shortened links from resolving over HTTPS.
This content was generated by AI and reviewed, edited, and verified by a human.