Hongkong Post Repository

"Repository", as defined under the Electronic Transactions Ordinance, means an information system for storing and retrieving certificates and other information relevant to certificates. Hongkong Post maintains a repository that contains a list of accepted certificates (including e-Cert and Bank-Cert) issued under the Certification Practice Statement (CPS), together with the current certificate revocation list. Hongkong Post promptly publishes each certificate in the repository following receipt of the Applicant's confirmation of acceptance of the certificate.

• To view any accepted certificate, click here or through LDAP at ldap://ldap1.hongkongpost.gov.hk

Certification Revocation List (CRL) (supported by "Hongkong Post e-Cert CA 1" root certificate)

Hongkong Post updates and publishes the following Certificate Revocation Lists (CRLs) containing information of suspended or revoked e-Certs and Bank-Certs 3 times daily at 09:15, 14:15 and 19:00 Hong Kong Time (i.e. 01:15, 06:15 and 11:00 Greenwich Mean Time (GMT or UTC)):-

1. Partitioned CRLs that contain Information of suspended or revoked certificates in groups. Each of the partitioned CRLs is available for public access at a location (URL) specified in the "CRL Distribution Points" field of each certificate issued. For e-Cert (Personal), the URL is in the form of http://crl1.hongkongpost.gov.hk/crl/eCertCA1CRL1_<xxxxx>.crl, where <xxxxx> is a string of five alphanumeric characters. For other types of e-Cert and Bank-Cert, the URL is http://crl1.hongkongpost.gov.hk/crl/eCertCA1CRL2.crl.
2. Full CRL that contains Information of all suspended or revoked certificates. The Full CRL is available at :

• http://crl1.hongkongpost.gov.hk/crl/eCertCA1CRL1.crl; or
• ldap://ldap1.hongkongpost.gov.hk (port 389, cn=Hongkong Post e-Cert CA 1 CRL1, o=Hongkong Post, c=HK);

Under normal circumstances, Hongkong Post will publish the latest CRL as soon as possible after the update time. Hongkong Post may need to change the above updating and publishing schedule of the e-Cert CRL without prior notice if such changes are considered to be necessary under unforeseeable circumstances.

• Click here to download previous generated full CRL

To view the CRL profile, please see Appendix C of the e-Cert CPS or Bank-Cert CPS.

Certification Revocation List (CRL) (supported by "Hongkong Post e-Cert CA" root certificate)

Before 31 March 2005, such CRLs were updated 3 times daily at 09:15, 14:15 and 19:00 Hong Kong Time (i.e. 01:15, 06:15 and 11:00 GMT). On 31 March 2005, Hongkong Post has ceased to issue CRLs under the root “Hongkong Post e-Cert CA” (click here for related information). The last CRL is at "http://www.hongkongpost.gov.hk/crl/eCert.crl".

• Click here to download previously generated CRL supported by "Hongkong Post e-Cert CA" root certificate.