---
"@context": https://schema.org
"@type": TechArticle
"@id": https://www.twilio.com/docs/api/errors/30140#article
headline: "30140: Certificates with OCSP required are not supported"
url: https://www.twilio.com/docs/api/errors/30140
inLanguage: en
dateModified: 2026-04-20T06:23:21.000Z
author:
  "@type": Organization
  name: Twilio Developer Education Team
publisher:
  "@type": Organization
  name: Twilio
---

# 30140: Certificates with OCSP required are not supported

Log Type: APPLICATION

Log Level: ERROR

## Description

This error occurs when you upload a TLS certificate for Link Shortening that requires OCSP stapling through the `MUST_STAPLE` attribute. Link Shortening does not support certificates that require OCSP stapling.

### Possible causes

* Your Bring Your Own Certificate for a Link Shortening domain was generated with the `MUST_STAPLE` attribute.
* The certificate requires OCSP stapling, which Link Shortening does not support.

### Possible solutions

* Generate a new PEM-formatted certificate and private key without the `MUST_STAPLE` attribute.
* Upload the replacement certificate to your Link Shortening domain. Allow up to five minutes for certificate validation to complete.
* Use a Twilio-managed certificate instead of uploading your own certificate. If your DNS uses CAA records, include `letsencrypt.org` so Twilio can request and renew the certificate.

#### Additional resources

* [Link Shortening](/docs/messaging/features/link-shortening)
* [Link Shortening Onboarding Guide](/docs/messaging/features/link-shortening/onboarding-guide)