In February 2027, we are changing the certificate authorities behind Sentry's TLS certificates. Today, Sentry's ingestion and web endpoints use certificates issued by DigiCert. Starting in February 2027, they will be issued by Google Trust Services (GTS) and Let's Encrypt.

For almost all customers, this change is transparent. Your SDKs will keep connecting to Sentry as they do today, and the domains you send data to aren't changing.

If you pin Sentry's TLS certificates, your connections will fail after the cutover. Do one of the following before then:

• Remove certificate pinning for Sentry's domains (recommended), or
• Add Let's Encrypt and Google Trust Services to your pinned CAs.

The current authorities and roots are on our SSL documentation page.

If you run older platforms, some very old or unpatched devices don't trust the Let's Encrypt ISRG Root X1 certificate — for example, Android before 7.1.1 and Java JRE before 8u141 / 7u151. Update them to a supported version.

We'll publish the exact cutover date in a follow-up Changelog post and on our status page .

Read the full details in our knowledge base article.