rewindex

CompaniesTelnyxIncidents

Telnyx: Upcoming TLS Certificate renewals for SIP Trunking Signaling - CA and AU regions

MaintenancemaintenanceStatus: maintenance completeStarted Not resolved3 updatesstatus.telnyx.com (opens in new tab)

Affected components: CanadaAustralia

Timeline of updates

  1. maintenance scheduled

    Our Telephony Engineers will perform maintenance on our inbound SIP proxy servers in the Canada (sip.telnyx.ca: http://sip.telnyx.ca (opens in new tab)) and Australia (sip.telnyx.com.au: http://sip.telnyx.com.au (opens in new tab)) regions.

    During this maintenance, our TLS certificate for each proxy server will be renewed. These important changes will happen.

    • We'll switch Certificate Authority from Sectigo to LetsEncrypt.
    • The "clientAuth" EKU is being deprecated, which may affect customers who use mTLS (mutual TLS) for SIP signaling.

    This change may be important for any customer who has our old (current) TLS certificate or root CA certificate (or chain) loaded into an SBC/appliance/phone.

    A notification was sent to customers recently (21st July, subject "Action may be required: TLS certificate changes for Telnyx SIP proxies"); more-detailed information can be found online here.

    For any customer seeking to test TLS compatibility before the renewal, note that our Staging SIP proxy server at sipstaging.telnyx.com:5061 can be used to test both inbound and outbound calls (and registrations); it has a certificate from the same certificate authority.

    For any customer not using TLS, the change is expected to be completely seamless.

  2. maintenance in progress

    Maintenance has started

  3. maintenance complete

    We've completed the TLS certificate change at sip.telnyx.com.au: http://sip.telnyx.com.au (opens in new tab) servers.

    For sip.telnyx.ca: http://sip.telnyx.ca (opens in new tab), we've completed the certificate change at only one of the two proxy servers (sip-anycast2.telnyx.ca: http://sip-anycast2.telnyx.ca (opens in new tab), 64.16.250.13).

    The primary server (at sip-anycast1.telnyx.ca: http://sip-anycast1.telnyx.ca (opens in new tab), 192.76.120.31) has not been changed; we're postponing this until Wednesday 9th September (next week) to give some customers a few more days to review and update TLS configurations.

    Please note that the existing TLS certificate for sip.telnyx.ca: http://sip.telnyx.ca (opens in new tab) is due to expire on 12th September, so we'll still complete the renewal before the expiry.

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Impact, status and times are the vendor’s own, as last archived. View on status.telnyx.com (opens in new tab).

Cite this

Maintenance posted by Telnyx, started 2026-09-04 09:00 UTC, not resolved, 3 update(s).

Title
Upcoming TLS Certificate renewals for SIP Trunking Signaling - CA and AU regions
Vendor
Telnyx
Date
URL
https://rewindex.com/company/telnyx/incidents/01M0Z9S3D5N1NSK0BJQ35E932K

Telnyx profileRecent Telnyx incidentsAll outages on September 4, 2026Telnyx in September 2026MarkdownJSON