Hongkong Post CA Root Certificate

Each of the e-Certs issued by Hongkong Post bears a digital signature supported by a Hongkong Post CA root certificate that proves the authenticity of the e-Cert. The common browser software installed on your computer supports storage and use of such root certificates. To allow your browser to recognize the e-Certs issued by Hongkong Post, the following Hongkong Post CA root certificates should be installed in your browser on your computer:-

• Hongkong Post Root CA 2
  • Hongkong Post e-Cert CA 2 - 15
  • Hongkong Post e-Cert CA 2 - 17
  • Hongkong Post e-Cert CA 2 - 19
• Hongkong Post Root CA 3
  • Hongkong Post e-Cert SSL CA 3 - 17
  • Hongkong Post e-Cert EV SSL CA 3 - 17
• GlobalSign Root CA - R3
  • Hongkong Post Root CA 3 (Cross certificate 2022)

Hongkong Post Root CA 2

This Root CA is valid for 25 years (5 September 2015 – 5 September 2040) and is required for verifying the Hongkong Post digital signature on the Sub CA^{Note 1} "Hongkong Post e-Cert CA 2 - 15", "Hongkong Post e-Cert CA 2 - 17" and "Hongkong Post e-Cert CA 2 - 19".

• Download the "Hongkong Post Root CA 2" certificate
• Instructions of installation of CA certificates

Hongkong Post e-Cert CA 2 - 15

This Sub CA^{Note 1} is valid from 5 September 2015 to 5 September 2030 and is required for verifying the Hongkong Post digital signature on Bank-Cert (Personal), Bank-Cert (Corporate), Bank-Cert (Bank), e-Cert (Personal) with "Mutual Recognition" Status, e-Cert (Organisational) with "Mutual Recognition" Status and e-Cert (Organisational Role).

The words "Hongkong Post e-Cert CA 2 - 15" will be displayed in the "Issuer" field of the above Bank-Certs.

• Download the "Hongkong Post e-Cert CA 2 - 15" certificate
• Instructions of installation of CA certificates

Hongkong Post e-Cert CA 2 - 17

This Sub CA^{Note 1} is valid from 12 August 2017 to 12 August 2032 and is required for verifying the Hongkong Post digital signature on e-Cert (Personal), e-Cert (Organisational), e-Cert (Encipherment), g-Cert (Individual) and g-Cert (Functional Unit).

The words "Hongkong Post e-Cert CA 2 - 17" will be displayed in the "Issuer" field of the above e-Certs.

• Download the "Hongkong Post e-Cert CA 2 - 17" certificate

Hongkong Post e-Cert CA 2 - 19

This Sub CA^{Note 1} is valid from 29 July 2019 to 29 July 2034 and is required for verifying the Hongkong Post digital signature on iAM Smart-Cert.

The words "Hongkong Post e-Cert CA 2 - 19" will be displayed in the "Issuer" field of the above iAM Smart-Certs.

• Download the "Hongkong Post e-Cert CA 2 - 19" certificate

Hongkong Post Root CA 3

This Root CA is valid for 25 years (3 June 2017 – 3 June 2042) and is required for verifying the Hongkong Post digital signature on the Sub CA^{Note 1} "Hongkong Post e-Cert SSL CA 3 - 17" and "Hongkong Post e-Cert EV SSL CA 3 - 17".

• Download the "Hongkong Post Root CA 3" certificate
• Instructions of installation of CA certificates

Hongkong Post e-Cert SSL CA 3 - 17

This Sub CA^{Note 1} is valid from 3 June 2017 to 3 June 2032 and is required for verifying the Hongkong Post digital signature on e-Cert (Server).

The words "Hongkong Post e-Cert SSL CA 3 - 17" will be displayed in the "Issuer" field of the above e-Certs.

• Download the "Hongkong Post e-Cert SSL CA 3 - 17" certificate
• Instructions of installation of CA certificates

Hongkong Post e-Cert EV SSL CA 3 - 17

This Sub CA^{Note 1} is valid from 3 June 2017 to 3 June 2032 and is required for verifying the Hongkong Post digital signature on Extended Validation e-Cert (Server).

The words "Hongkong Post e-Cert EV SSL CA 3 - 17" will be displayed in the "Issuer" field of the above e-Certs.

• Download the "Hongkong Post e-Cert EV SSL CA 3 - 17" certificate
• Instructions of installation of CA certificates

Hongkong Post Root CA 3 (Cross certificate 2022)

This cross certificate "Hongkong Post Root CA 3" is valid from 16 November 2022 to 18 March 2029 signed by "GlobalSign Root CA - R3".

• Download the "Hongkong Post Root CA 3" cross certificate
• User Guide for installation of the cross certificate

Expired Hongkong Post Root CA 1

The Root CA 1, Sub CA "Hongkong Post e-Cert CA 1 - 10", "Hongkong Post e-Cert CA 1 - 14" and "Hongkong Post e-Cert CA 1 - 15" are expired on 15 May 2023.

• Download the expired "Hongkong Post Root CA 1" certificate
• Download the expired "Hongkong Post e-Cert CA 1 - 10" certificate
• Download the expired "Hongkong Post e-Cert CA 1 - 14" certificate
• Download the expired "Hongkong Post e-Cert CA 1 - 15" certificate

Expired Hongkong Post e-Cert CA 1

This Sub CA^{Note 1} expired on 15 May 2013. It has been used to issue e-Cert and Bank-Cert in the following periods:-

1. e-Cert (Personal) issued between 23 June 2003 and 25 February 2010
2. e-Cert (Organisational), e-Cert (Encipherment), e-Cert (Server), Bank-Cert (Personal) and Bank-Cert (Corporate) issued between 12 January 2004 and 25 February 2010.

The words "Hongkong Post e-Cert CA 1" will be displayed in the "Issuer" field of the above e-Certs and Bank-Certs.

• Download the expired "Hongkong Post e-Cert CA 1" certificate

Retired Hongkong Post CA Root Certificates

The CA root certificates "Hongkong Post Root CA" and "Hongkong Post e-Cert CA" have been retired and revoked on 31 March 2005.

Download retired CA certificates

Note 1: Sub CA refers to the subordinate certification authority certificate which is issued by the respective Root CA "Hongkong Post Root CA 1" , "Hongkong Post Root CA 2" or "Hongkong Post Root CA 3" and is used to sign the Hongkong Post Recognized Certificates.