Hongkong Post Repository

"Repository", as defined under the Electronic Transactions Ordinance, means an information system for storing and retrieving certificates and other information relevant to certificates. Hongkong Post maintains a repository that contains a list of accepted certificates (including e-Cert and Bank-Cert) issued under the Certification Practice Statement (CPS), together with the current certificate revocation list. Hongkong Post promptly publishes each certificate in the repository following receipt of the Applicant's confirmation of acceptance of the certificate.

• View any accepted certificate, or through LDAP at ldap://ldap1.hongkongpost.gov.hk

Hongkong Post Certification Revocation List (CRL)

Under normal circumstances, Hongkong Post will publish the latest CRL as soon as possible after the update time mentioned below. Hongkong Post may need to change the updating and publishing schedule of the CRL without prior notice if such changes are considered to be necessary under unforeseeable circumstances.

Certificate Revocation List supported by "Hongkong Post e-Cert CA 1 - 10"

Hongkong Post updates and publishes the following Certificate Revocation Lists (CRLs) issued by the Sub CA "Hongkong Post e-Cert CA 1 - 10" containing information of suspended or revoked e-Certs and Bank-Certs 3 times daily at 09:15, 14:15 and 19:00 Hong Kong Time (i.e. 01:15, 06:15 and 11:00 Greenwich Mean Time (GMT or UTC)):-

1. Partitioned CRLs that contain Information of suspended or revoked certificates in groups. Each of the partitioned CRLs is available for public access at the following locations (URLs):
   1. e-Cert (Personal) :
      http://crl1.hongkongpost.gov.hk/crl/eCertCA1-10CRL1_<xxxxx>.crl
      where <xxxxx> is a string of five alphanumeric characters.
   2. e-Cert (Organisational), e-Cert (Encipherment) and all Bank-Certs :
      http://crl1.hongkongpost.gov.hk/crl/eCertCA1-10CRL2.crl
   3. e-Cert (Server) :
      The information of suspended or revoked e-Cert (Server) certificates will only be published in the full CRL.
2. Full CRL that contains Information of all suspended or revoked certificates that are issued by the Sub CA "Hongkong Post e-Cert CA 1 - 10". The Full CRL is available at :-
   • http://crl1.hongkongpost.gov.hk/crl/eCertCA1-10CRL1.crl or
   • ldap://ldap1.hongkongpost.gov.hk
     (port 389, cn=Hongkong Post e-Cert CA 1 - 10 CRL1, o=Hongkong Post, c=HK)

Download previously generated CRL issued by the Sub CA "Hongkong Post e-Cert CA 1 - 10" (26-2-2010 onwards)

To view the CRL profile, please see Appendix C of the e-Cert CPS or Bank-Cert CPS.

Certificate Revocation List supported by "Hongkong Post e-Cert CA 1"

The Sub CA "Hongkong Post e-Cert CA 1" has ceased to issue Recognized Certificates with effect from 26 February 2010, but will continue the existing practice to issue the following Certificate Revocation Lists (CRLs) containing information of suspended or revoked e-Certs and Bank-Certs 3 times daily at 09:15, 14:15 and 19:00 Hong Kong Time (i.e. 01:15, 06:15 and 11:00 Greenwich Mean Time (GMT or UTC)) until its expiry:-

1. Partitioned CRLs that contain Information of suspended or revoked certificates in groups. Each of the partitioned CRLs is available for public access at a location (URL) specified in the "CRL Distribution Points" field of each certificate issued:
   1. e-Cert (Personal) :
      http://crl1.hongkongpost.gov.hk/crl/eCertCA1CRL1_<xxxxx>.crl
      where <xxxxx> is a string of five alphanumeric characters.
   2. For other types of e-Cert and Bank-Cert :
      http://crl1.hongkongpost.gov.hk/crl/eCertCA1CRL2.crl
2. Full CRL that contains Information of all suspended or revoked certificates. The Full CRL is available at :-
   • http://crl1.hongkongpost.gov.hk/crl/eCertCA1CRL1.crl or
   • ldap://ldap1.hongkongpost.gov.hk
     (port 389, cn=Hongkong Post e-Cert CA 1 CRL1, o=Hongkong Post, c=HK)

Download previously generated CRL issued by the Sub CA "Hongkong Post e-Cert CA 1" (23-6-2003 onwards)

To view the CRL profile, please see Appendix C of the corresponding e-Cert CPS or Bank-Cert CPS.

Certificate Revocation List supported by retired "Hongkong Post e-Cert CA"

Before 31 March 2005, such CRLs were updated 3 times daily at 09:15, 14:15 and 19:00 Hong Kong Time (i.e. 01:15, 06:15 and 11:00 GMT). On 31 March 2005, Hongkong Post has ceased to issue CRLs under the Sub CA "Hongkong Post e-Cert CA" (relevant information). The last CRL is at http://www.hongkongpost.gov.hk/crl/eCert.crl.

Download previously generated CRL issued by the Sub CA "Hongkong Post e-Cert CA" (31-1-2000 to 31-3-2005)

Hongkong Post Authority Revocation List (ARL)

Authority Revocation List supported by "Hongkong Post Root CA 1"

Hongkong Post updates and publishes Authority Revocation List (ARL) that contains information of suspended or revoked Sub CA certificates. The ARL supported by "Hongkong Post Root CA 1" has a validity period of 1 year. Hongkong Post will update and publish the ARL before its expiry or when necessary. The latest ARL is available at the following locations:-

• http://crl1.hongkongpost.gov.hk/crl/RootCA1ARL.crl or
• ldap://ldap1.hongkongpost.gov.hk
  (port 389, cn=Hongkong Post Root CA 1, o=Hongkong Post, c=HK)