Hongkong Post e-Cert

Date: 10 May 2022

Issuance of e-Cert (Server) without "Organisational Unit" (OU) fields with effect from 30 August 2022

To meet the requirement from passed Ballot SC47v2 of CA/Browser Forum, Hongkong Post Certification Authority ("HKPCA") will issue e-Cert (Server) without the "Organisational Unit" (OU) fields in phases according to the following transition plan: -

Date

Event

With immediate effect

Trial e-Cert (Server) without OU fields is available for testing upon request.

Starting from 30 August 2022

Only e-Cert (Server) without OU fields will be issued.

All e-Cert (Server) with OU fields will CEASE to be issued.

Starting from 30 August 2022, newly issued e-Cert (Server) will not contain any OU fields in the certificate. The validity of e-Cert (Server) issued before 30 August 2022 will not be affected.

As only e-Cert (Server) without OU fields will be issued starting from 30 August 2022, e-Cert (Server) subscribers should prepare for the use of e-Cert (Server) without OU fields and evaluate the implications, if any, to their servers and related client applications. To request for trial certificates for testing, please call Hongkong Post Certification Authority e-Cert Customer Service at 2921 6633 or email to enquiry@eCert.gov.hk.

Relevant Questions and Answers

1. Why is it necessary to deprecate the OU fields in e-Cert (Server)?

The change is in line with passed Ballot SC47v2 of the CA/Browser Forum.

2. What will be the implications on subscribers and relying parties of e-Cert (Server)?

Subscribers and relying parties of e-Cert (Server) should assess whether they use OU fields in their systems and applications at present, and make the systems and applications ready for e-Cert (Server) without OU fields.

3. Will there be any change in e-Cert (Server) subscription and revocation procedures?

The existing e-Cert (Server) subscription and revocation procedures will remain unchanged. For generating the Certificate Signing Request (CSR), subscribers may leave the OU field blank or simply put "NA" if blank OU field is not allowed by the server software. If OU fields are present in the CSR, they will be ignored during the e-Cert (Server) issuance process after 30 August 2022.

4. Our e-Cert (Server) will expire beyond 30 August 2022. Do we need to replace them before 30 August 2022?

You do not need to replace any valid e-Cert (Server) certificates that are issued before 30 August 2022. They remain valid until their expiry.

5. How can I request for trial e-Cert (Server) to perform testing on our servers?

Trial e-Cert (Server) without OU fields is available for testing upon request. To request for trial certificates for testing, please call Hongkong Post Certification Authority e-Cert Customer Service at 2921 6633 or email to enquiry@eCert.gov.hk.

| Back | Top |

| Certizen Limited | Hongkong Post |

End of Page