# 30140: Certificates with OCSP required are not supported

Log Type: APPLICATION

Log Level: ERROR

## Description

This error occurs when you upload a TLS certificate for Link Shortening that requires OCSP stapling through the `MUST_STAPLE` attribute. Link Shortening does not support certificates that require OCSP stapling.

### Possible causes

* Your Bring Your Own Certificate for a Link Shortening domain was generated with the `MUST_STAPLE` attribute.
* The certificate requires OCSP stapling, which Link Shortening does not support.

### Possible solutions

* Generate a new PEM-formatted certificate and private key without the `MUST_STAPLE` attribute.
* Upload the replacement certificate to your Link Shortening domain. Allow up to five minutes for certificate validation to complete.
* Use a Twilio-managed certificate instead of uploading your own certificate. If your DNS uses CAA records, include `letsencrypt.org` so Twilio can request and renew the certificate.

#### Additional resources

* [Link Shortening](/docs/messaging/features/link-shortening)
* [Link Shortening Onboarding Guide](/docs/messaging/features/link-shortening/onboarding-guide)