Find
May 20, 2026

Eurex Clearing

Eurex Clearing Readiness Newsflash | C7: FIXML interface new server certificates

Eurex Clearing Readiness Newsflash | C7: FIXML interface new server certificates

With this newsflash, Eurex Clearing announces that new SSL/TLS certificates on the AMQP brokers used for the Eurex Clearing FIXML interface in simulation and production environment will be installed. The new certificates will replace the existing certificates which are approaching their expiration date. 

Please note that the validity of the certificates is specified by regulatory authorities, and it is consistent across all certification authorities.

The lifetimes of the certificates issued by external CA (DigiCert) will be reduced (see table below).

  • For certificates issued by external CA (DigiCert), the current maximum lifetime of a TLS certificate is 398 days
  • As of 15 March 2026, the maximum lifetime for a TLS certificate will be 200 days
  • As of 15 March 2027, the maximum lifetime for a TLS certificate will be 100 days
  • As of 15 March 2029, the maximum lifetime for a TLS certificate will be 47 days

The new certificates, replacing the existing ones, will be activated on the following dates:

Simulation start: 19 June 2026
Production start: 27 June 2026

The new public keys for simulation will be available for download on 12 June 2026 and for production on 19 June 2026 on the Eurex Clearing website www.eurex.com/ec-en under the following link:

C7 > Supporting Documents > Messaging Interfaces Connectivity

To make the client application accept the server certificate during the connection establishment, the public keys of the AMQP brokers or the public keys of the Certificate Authority (CA) must be installed on the client’s application / truststore prior to the activation dates.

If required, Clearing Members can test connectivity in the production environment. A support window will be available on 27 June 2026, from 12:00 to 15:00 CEST. If you encounter any issues during this time, please contact cts@deutsche-boerse.com or call your VIP number.

To allow validation of existing FIXML Broker server certificates and the seamless transition to new server certificates in the future, the following root certificates must be added as part of any regular trust store. This can serve also as an authentication method when the connection is being established with the AMQP broker.

DigiCert Global Root CA: https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem
DigiCert Global Root G2: https://cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem 
DigiCert TLS RSA4096 Root G5: https://cacerts.digicert.com/DigiCertTLSRSA4096RootG5.crt.pem

The public keys of the CA or the public keys of the AMQP Broker must be installed first on the client’s infrastructure and shall be made available for the client application to accept the server certificates. Most AMQP clients can work with multiple certificates at the same time, therefore it is possible to upload the public keys in advance. Once the new production certificate is installed on Eurex side on 27 June 2026, existing client connections with the old certificate will not drop automatically and will remain connected until disconnection or AMQP broker re-start.

After activation, any new connection will only work with the new public keys in place. The new FIXML certificate does not affect account specific certificates uploaded in the Clearing Member Portal.

More details about the SSL/TLS configuration of different AMQP libraries can be found in the Eurex Clearing Messaging Interfaces documentation on the Eurex Clearing website www.eurex.com/ec-en/ under the following link:

C7 > Supporting Documents > Messaging Interfaces Connectivity

  • Eurex Clearing Messaging Interfaces – Connectivity A: Connectivity
  • Eurex Clearing Messaging Interfaces – Connectivity B: AMQP Programming Guide
  • Eurex Clearing Messaging Interfaces – Connectivity E: AMQP Setup & Internals 

If you have any questions or require further information, please contact your dedicated Technical Key Account Manager, or send an e-mail to cts@deutsche-boerse.com.

Kind regards, 
Your Client Services Team 

Visit now Eurex Support Clearing​ to access a wide array of support content!


Recipients:

All Clearing Members, ISA Direct Clearing Members, Disclosed Direct Clients of Eurex Clearing AG and vendors

Target groups:

Front Office/Trading, Middle + Backoffice, IT/System Administration

Contact:

cts@deutsche-boerse.com

Web:

Support > Technology > C7 > Supporting Documents > Messaging Interfaces Connectivity