I tried to change the credit card for my GoPhone auto refill. I got a text "You have cancelled your GoPhone Auto Refill ... To set up Auto Refill again, go to myprepaidrefill.com..."
If I follow that link on my Android phone, my Firefox browser correctly complains:
This Connection is Untrusted
...
myprepaidrefill.com uses an invalid security certificate. The certificate is only valid or www.myprepaidrefill.com (Error code: ssl_error_bad_cert_domain)
AT&T should change the https certificate so it applies to the site without "www." as well, or change the link in the text message so it starts with www.
The workaround is to add "www." to the URL, or accept the risk.
Understand, I don't have a problem. You, AT&T, have a problem, and I'm telling you how to fix it.