On Tuesday 8 December 2026 at 8:00 am NZDT, the SSL certificate for Modica’s API endpoint (api.modicagroup.com) is scheduled to change from Sectigo to certificates issued by Amazon Trust Services through AWS Certificate Manager (ACM).
Do I need to do anything?
If your systems use the standard trust store provided by your operating system, runtime or browser, no action is needed, provided Amazon Trust Services root certificates are already trusted.
If you manage your own trust store, or your integration only accepts specific certificates (known as certificate pinning), you need to act before the change. Add the Amazon Trust Services root certificates listed in our SSL Certificates documentation now, and keep your existing entries in place until the change is complete.
Which services are affected?
The Modica API endpoint (api.modicagroup.com).
The Omni web portal (omni.modicagroup.com) is not affected, as it already uses an ACM-issued certificate.
Why is this changing?
Industry rules are progressively shortening SSL/TLS certificate lifetimes, and certificate chains may change during renewals. Moving to automatically renewed certificates helps maintain security and reduces the need for manual certificate management.
We recommend trusting root certificates rather than individual leaf or intermediate certificates. Following this change, we will no longer publish leaf or intermediate certificates for the affected endpoint, as these may change regularly.
We do not expect any interruption to service during the migration.
For further information, including certificate guidance and Amazon Trust Services root certificates, please refer to our SSL Certificates documentation: