Hongkong Post e-Cert (Server)

Hongkong Post e-Cert (Server) certificate is issued to Bureaux and Departments of the Government of Hong Kong SAR, organisations that hold a valid business registration certificate issued by the Government of the Hong Kong SAR and statutory bodies of Hong Kong whose existence is recognized by the laws of Hong Kong SAR (a "Subscriber Organisation"); and that wish to have a certificate issued in a server name, or multiple server names, owned by that organisation.

Applicants may choose the following during the application:

An e-Cert (Server) certificate contains the following information of the Subscriber Organisation:

The Server name(s) (including domain name of the server(s)) owned by the Subscriber Organisation;
Subscriber Organisation's name;
Branch name or department name of the Subscriber Organisation;
Subscriber Organisation's company/business registration number; and
A unique Subscriber Reference Number.

An Extended Validation e-Cert (Server) certificate contains the following additional information of the Subscriber Organisation:

Place of business; and
Business category ("Private Organization", "Government Entity" or "Business Entity").

Summary of Hongkong Post e-Cert (Server) Features

		e-Cert (Server) (without "Wild-card" feature and "Multi-domain" feature)	e-Cert (Server) with "Wild-card" feature	e-Cert (Server) with "Multi-domain" feature	EV e-Cert (Server)	EV e-Cert (Server) with "Multi-domain" feature
Validity Period	1-year
Certificate Features	Support "OCSP"
	"digital signature" Key Usage#
	Support "Wildcard" server name
	Identify multiple server names (maximum 50)
	Support display of organization name in Chinese or English language on e-Cert
	Support Chinese domain name

# Note: The "digital signature" Key Usage is to be used only for server authentication and for establishment of secure communication channels with the server.

Subscription Fees of Hongkong Post e-Cert (Server)

New / Renewal Subscription Fee	Certificate with a 1-year validity period
e-Cert (Server) (without "Wildcard" feature and "Multi-domain" feature)	** ~~HK$2,500 per certificate~~ Promotional Offer: HK$2,350 per certificate
e-Cert (Server) with "Wildcard" feature	** ~~HK$8,700 + Each Additional Server HK$500~~ Promotional Offer: HK$8,265 per certificate + Each Additional Server HK$475
	An e-Cert (Server) with "Wildcard" feature can be used in one server by default. Extra fee per additional server applies if it is to be used in more than one server, and that the extra fee per additional server shall be applied for the whole validity period of the certificate regardless of when the certificate is to be used in the additional servers.
e-Cert (Server) with "Multi-domain" feature	HK$3,000 + Each Additional Server Name HK$2,500
	An e-Cert (Server) with "Multi-domain" feature identifies one server name by default. Extra fee per additional server name applies if more than one, but not more than 50, server names are to be identified in the certificate.
Extended Validation e-Cert (Server) (for single server name)	** ~~HK$3,000 per certificate~~ Promotional Offer: HK$2,700 per certificate
Extended Validation e-Cert (Server) with "Multi-domain" feature	HK$3,500 + Each Additional Server Name HK$2,500
	An Extended Validation e-Cert (Server) with "Multi-domain" feature identifies one server name by default. Extra fee per additional server name applies if more than one, but not more than 50, server names are to be identified in the certificate.

** For e-Cert (Server) (without "Wildcard" feature and "Multi-domain" feature), with effect from 1 July 2023, the annual subscription fee is discounted from HK$2,500 to HK$2,350 per certificate, until further notice. For details, please refer to the relevant announcement.

** For Extended Validation e-Cert (Server) (without "Multi-domain" feature), with effect from 1 July 2023, the annual subscription fee is discounted from HK$3,000 to HK$2,700 per certificate, until further notice. For details, please refer to the relevant announcement.

** For e-Cert (Server) with "Wildcard" feature and each additional server, with effect from 1 January 2020, the annual subscription fee discount is offered until further notice. For details, please refer to the relevant announcement.

With effect from 21 January 2022, Hongkong Post Certification Authority issues Extended Validation e-Cert (Server) and Extended Validation e-Cert (Server) with "Multi-domain" feature. For details, please refer to the relevant announcement.

With effect from 31 August 2021, any parties who can demonstrate a proof of the compromised private key of certificate, may submit the proof through the Compromised Key Reporting web page on the HKPost CA web site.

Supported Web Browsers

Common web browsers as listed below now come with the Hongkong Post Certification Authority root certificate included: -

Google Chrome and other supported web browsers on Android 11 or above
Microsoft Edge and other supported web browsers on Windows 10 or above
Apple Safari and other supported web browsers on iOS 15 or above, iPadOS 15 or above, macOS 12 or above
Mozilla Firefox version 68 or above on all supported platforms

Users of the supported web browsers visiting websites that are installed with the Hongkong Post e-Cert (Server) certificate will be free from certain alert messages or manual intervention when their browsers establish a secure connection to these websites. All users are recommended to upgrade their web browsers to a Supported Web Browser as soon as possible, if they have not done so.

For subscribers or relying parties who run their application systems that explicitly trust Hongkong Post CA root certificates, they are reminded to include all relevant root certificates of Hongkong Post CA in their trust lists. Hongkong Post CA root certificates can be download from here.

Reliance Limit of Hongkong Post e-Cert (Server)

The "Reliance Limit" as defined under the Electronic Transactions Ordinance in respect of one e-Cert (Server) certificate is HK$200,000.

Certification Practice Statement

To know more about our practices in issuing the e-Cert (Server), please refer to the e-Cert Certification Practice Statement (CPS).

Click here to download the application form.