Hongkong Post e-Cert
Home Contact Us Sitemap 繁體中文 简体中文 Text Mode
A A A


Certizen Limited

Hongkong Post

Level Double-A conformance, W3C WAI Web Content Accessibility Guidelines 2.0
 
 

Date: 18 May 2023

Expiry of Root CA "Hongkong Post Root CA 1"

This notice serves to update that Root CA "Hongkong Post Root CA 1" (Root CA 1) expired on 15 May 2023 12:52:29 (Hong Kong Time).

The following Sub CAs under Root CA 1 issued the last full Certificate Revocation List (CRL) and partitioned CRLs at 09:15 on 15 May 2023 (Hong Kong Time) at the following links, and no further update is provided afterwards:

  1. Full CRLs
    • issued by Sub CA "Hongkong Post e-Cert CA 1 - 10":
      http://crl1.hongkongpost.gov.hk/crl/eCertCA1-10CRL1.crl or
      ldap://ldap1.hongkongpost.gov.hk
      (port 389, cn=Hongkong Post e-Cert CA 1 - 10 CRL1, o=Hongkong Post, c=HK)
    • issued by Sub CA "Hongkong Post e-Cert CA 1 - 14":
      http://crl1.hongkongpost.gov.hk/crl/eCertCA1-14CRL1.crl or
      ldap://ldap1.hongkongpost.gov.hk
      (port 389, cn=Hongkong Post e-Cert CA 1 - 14 CRL1, o=Hongkong Post, c=HK)
    • issued by Sub CA "Hongkong Post e-Cert CA 1 - 15":
      http://crl1.hongkongpost.gov.hk/crl/eCertCA1-15CRL1.crl or
      ldap://ldap1.hongkongpost.gov.hk
      (port 389, cn=Hongkong Post e-Cert CA 1 - 15 CRL1, o=Hongkong Post, c=HK)
  2. Partitioned CRLs
    • issued by Sub CA "Hongkong Post e-Cert CA 1 - 10":
      http://crl1.hongkongpost.gov.hk/crl/eCertCA1-10CRL1_<xxxxx>.crl
      (where <xxxxx> is a string of five alphanumeric characters)
      http://crl1.hongkongpost.gov.hk/crl/eCertCA1-10CRL2.crl

As there is no further update to the above mentioned CRLs, you are advised to stop any regular download of the above CRLs to prevent any possible false alarm of download failure of updated CRLs.

The Root CA 1 issued the last Authority Revocation List (ARL) at 10:41 on 11 November 2022 (Hong Kong Time) at the following links, and no further update is provided afterwards:

  • http://crl1.hongkongpost.gov.hk/crl/RootCA1ARL.crl or
    ldap://ldap1.hongkongpost.gov.hk
    (port 389, cn=Hongkong Post Root CA 1, o=Hongkong Post, c=HK)

Besides, the Root CA 1 and the Sub CA "Hongkong Post e-Cert CA 1 - 15" have stopped signing OCSP responses after the expiry of the Root CA 1.

For enquiries, please call HKPCA e-Cert Customer Service at 2921 6633 or email to enquiry@eCert.gov.hk.