Frequently Asked Questions

STIR/SHAKEN (Secure Telephone Identity Revisited / Signature-based Handling of Asserted information using toKENs) is an FCC-mandated framework requiring U.S. voice service providers to cryptographically sign and verify caller ID information. It was enacted to combat robocalling and caller ID spoofing. All telephone service providers must implement STIR/SHAKEN and obtain certificates from an authorized Certificate Authority.

If you are a U.S. voice service provider (VSP) that originates calls on the public switched telephone network (PSTN), yes. The FCC requires all VSPs to implement STIR/SHAKEN. Providers must obtain a Service Provider Code (SPC) token from iConectiv and a certificate from an authorized CA like Telonium to sign calls.

An Operating Company Number (OCN) is a 4-character identifier assigned by NECA (National Exchange Carrier Association) that identifies your organization in the telecommunications industry -- a 5-character SPID or RespOrg code is also accepted where applicable. This identifier is required to obtain an SPC token from iConectiv, which in turn is required to receive a STIR/SHAKEN certificate. Each one corresponds to a distinct operating entity.

A Service Provider Code (SPC) token is a credential issued by iConectiv (the STIR/SHAKEN Policy Administrator) that authorizes your organization to receive STIR/SHAKEN certificates. You must obtain an SPC token from iConectiv before Telonium can issue you a certificate. Telonium integrates with iConectiv to streamline SPC token verification.

Once your company registration is verified and approved, certificate issuance typically occurs within one business day. The verification process — which confirms your legal entity, OCN ownership, and SPC token — may take additional time depending on the completeness of your registration.

Validity depends on your plan -- from 7 days on the free plan up to 1 or 2 years on paid plans. Telonium notifies you before expiration, and paid plans can renew certificates directly from the platform. Expired certificates cannot sign calls, so timely renewal is critical for continued FCC compliance.

Deactivating removes the certificate's public x5u URL so it can no longer be used to sign calls, but leaves the certificate record itself intact -- use it for an orderly wind-down. Revoking is permanent: it publishes the certificate to our Certificate Revocation List (CRL) and OCSP responder immediately, notifying all relying parties, and cannot be undone. Revoke only if a private key may be compromised.

If your private key is compromised or a certificate needs to be retired for good, you can request revocation from the Telonium platform -- it requires a typed confirmation, since it can't be undone. Revoked certificates are published immediately to our Certificate Revocation List (CRL) and OCSP responder, notifying all relying parties. A new certificate will need to be issued afterward.

Yes. Accounts on a paid plan can create scoped API keys to list, request, renew, deactivate, and revoke certificates directly from your own systems -- the same operations available in the dashboard. Full documentation is available from the API Keys page once you're signed in. API access requires a paid plan and isn't available on the free plan.

Yes. Telonium supports multi-OCN environments. You can associate multiple OCNs with your account, and each OCN can have its own subscription plan. This is designed for complex carrier groups, CLECs, and resellers who operate under multiple operating entities.

Telonium offers a free plan (one active certificate, no cost) as well as monthly, 1-year, and 2-year paid plans, each associated with your OCNs. You can view plan options and pricing after completing registration. Volume discounts may be available for carriers managing a large number of OCNs -- reach out through our Contact page to discuss.

Attestation levels indicate how confidently a carrier can vouch for the caller. A (Full) attestation means the service provider is responsible for the call and can verify the caller's identity and right to use the number. B (Partial) attestation means the provider knows the customer but cannot verify their right to use the number. C (Gateway) attestation is used when a call arrives at a US gateway from outside the STIR/SHAKEN ecosystem. Telonium certificates enable you to sign calls at any attestation level.

Yes. Our Certificate Validator and PKCS#12 Key Extractor tools are free and require no account -- open them directly from the homepage, or at /cert-validator and /p12-extractor.

You can cancel your account at any time by reaching out through our Contact page. Cancellation takes effect immediately, but you retain access through the end of your current billing period. Telonium does not provide refunds for partial billing periods. Note that certificate records must be retained per our Certificate Policy even after account closure.