Hongkong Post e-Cert
Home Contact Us Sitemap 繁體中文 简体中文 Text Mode
A A A


Certizen Limited

Hongkong Post

Level Double-A conformance, W3C WAI Web Content Accessibility Guidelines 2.0

 

Hongkong Post e-Cert (Server)

Hongkong Post e-Cert (Server) certificate is issued to Bureaux and Departments of the Government of Hong Kong SAR, organisations that hold a valid business registration certificate issued by the Government of the Hong Kong SAR and statutory bodies of Hong Kong whose existence is recognized by the laws of Hong Kong SAR (a "Subscriber Organisation"); and that wish to have a certificate issued in a server name, or multiple server names, owned by that organisation.

Applicants may choose the following during the application:

  1. e-Cert (Server)
  2. e-Cert (Server) with "Wildcard" feature
  3. e-Cert (Server) with "Multi-domain" feature
  4. Extended Validation e-Cert (Server)
  5. Extended Validation e-Cert (Server) with "Multi-domain" feature

An e-Cert (Server) certificate contains the following information of the Subscriber Organisation:

  • The Server name(s) (including domain name of the server(s)) owned by the Subscriber Organisation;
  • Subscriber Organisation's name;
  • Branch name or department name of the Subscriber Organisation;
  • Subscriber Organisation's company/business registration number; and
  • A unique Subscriber Reference Number.

An Extended Validation e-Cert (Server) certificate contains the following additional information of the Subscriber Organisation:

  • Place of business; and
  • Business category ("Private Organization", "Government Entity" or "Business Entity").

Summary of Hongkong Post e-Cert (Server) Features

    e-Cert (Server)
(without "Wild-card" feature and
"Multi-domain" feature)
e-Cert (Server)
with
"Wild-card" feature
e-Cert (Server)
with
"Multi-domain" feature
EV e-Cert (Server) EV e-Cert (Server)
with
"Multi-domain" feature
Validity Period 1-year
Certificate Features Support "OCSP"




"digital signature"
Key Usage#





Support "Wildcard" server name




Identify multiple server names (maximum 50)




Support display of organization name in Chinese or English language on e-Cert




Support Chinese domain name




# Note: The "digital signature" Key Usage is to be used only for server authentication and for establishment of secure communication channels with the server.

Subscription Fees of Hongkong Post e-Cert (Server)

New / Renewal
Subscription Fee
Certificate with a 1-year validity period
e-Cert (Server)
(without "Wildcard" feature and
"Multi-domain" feature)
HK$2,500
per certificate
e-Cert (Server)
with "Wildcard" feature
**HK$8,700 + Each Additional Server
HK$500

Promotional Offer:
HK$8,265
per certificate
+
Each
Additional Server
HK$475
An e-Cert (Server) with "Wildcard" feature can be used in one server by default. Extra fee per additional server applies if it is to be used in more than one server, and that the extra fee per additional server shall be applied for the whole validity period of the certificate regardless of when the certificate is to be used in the additional servers.
e-Cert (Server)
with "Multi-domain" feature
HK$3,000
+
Each Additional
Server Name
HK$2,500
An e-Cert (Server) with "Multi-domain" feature identifies one server name by default. Extra fee per additional server name applies if more than one, but not more than 50, server names are to be identified in the certificate.
Extended Validation e-Cert (Server)
(for single server name)
HK$3,000
per certificate
Extended Validation e-Cert (Server)
with "Multi-domain" feature
HK$3,500
+
Each Additional
Server Name
HK$2,500
An Extended Validation e-Cert (Server) with "Multi-domain" feature identifies one server name by default. Extra fee per additional server name applies if more than one, but not more than 50, server names are to be identified in the certificate.

With effect from 21 January 2022, Hongkong Post Certification Authority issues Extended Validation e-Cert (Server) and Extended Validation e-Cert (Server) with "Multi-domain" feature. For details, please refer to the relevant announcement.

With effect from 31 August 2021, any parties who can demonstrate a proof of the compromised private key of certificate, may submit the proof through the Compromised Key Reporting web page on the HKPost CA web site.

With effect from 31 August 2020, Hongkong Post Certification Authority ceases to issue certificates with 2-year validity period for e-Cert (Server), e-Cert (Server) with "Wildcard" feature and e-Cert (Server) with "Multi-domain" feature. For details, please refer to the relevant announcement.

** With effect from 1 January 2020, the subscription fee discount for e-Cert (Server) with "Wildcard" feature and each additional server is offered until further notice. For e-Cert (Server) (without "Wildcard" feature and "Multi-domain" feature), the promotional discount on its subscription fee is cancelled. The annual subscription fee for e-Cert (Server) (without "Wildcard" feature and "Multi-domain" feature) is therefore be resumed from HK$2,250 to the original price of HK$2,500 per certificate. For details, please refer to the relevant announcement.

Supported Web Browsers

Common web browsers as listed below now come with the Hongkong Post Certification Authority root certificate included: -

  • Google Chrome and other supported web browsers on Android 11 or above
  • Microsoft Edge and other supported web browsers on Windows 10 or above
  • Apple Safari and other supported web browsers on iOS 15 or above, iPadOS 15 or above, macOS 12 or above
  • Mozilla Firefox version 68 or above on all supported platforms

Users of the supported web browsers visiting websites that are installed with the Hongkong Post e-Cert (Server) certificate will be free from certain alert messages or manual intervention when their browsers establish a secure connection to these websites. All users are recommended to upgrade their web browsers to a Supported Web Browser as soon as possible, if they have not done so.

For subscribers or relying parties who run their application systems that explicitly trust Hongkong Post CA root certificates, they are reminded to include all relevant root certificates of Hongkong Post CA in their trust lists. Hongkong Post CA root certificates can be download from here.

Reliance Limit of Hongkong Post e-Cert (Server)

The "Reliance Limit" as defined under the Electronic Transactions Ordinance in respect of one e-Cert (Server) certificate is HK$200,000.

Certification Practice Statement

To know more about our practices in issuing the e-Cert (Server), please refer to the e-Cert Certification Practice Statement (CPS).

Click here to download the application form.

Apply for e-Cert
Usage of e-Cert
e-Cert User Guide
Related Links