Hongkong Post e-Cert

| Home | Contact Us | 繁體中文 | 简体中文 | Graphic Mode | Font Size : A A A

Date: 16 October 2026

Updating the Content Type Label for Certificate Revocation List

To better meet the technical requirements of the industry standard (RFC 5280), starting from 16 November 2026, Hongkong Post Certification Authority (HKPCA) will update the HTTP content type label “Content-Type” used for the delivery of the Certificate Revocation List (CRL). Details are as follows:

Existing HTTP “Content-Type”	New HTTP “Content-Type"
application/x-pkcs7-crl	application/pkix-crl

There will be no change to the URLs, contents, format or issuance process of CRL.

Actions to be taken by relying parties

• Review systems and applications that retrieve or process CRLs.
• Perform compatibility testing before the effective date.
• Ensure systems and applications can correctly process CRLs delivered with both “application/x-pkcs7-crl” and “application/pkix-crl” as the HTTP “Content-Type”.

Support Arrangements

Trial CRLs are available for testing at the following locations (URLs):

1. Partitioned CRLs:
   1. e-Cert (Personal):
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-17CRL1_<xxxxx>.crl where <xxxxx> is a string of five alphanumeric characters.
   2. e-Cert (Personal) with MR Status:
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-15CRL1_<xxxxx>.crl where <xxxxx> is a string of five alphanumeric characters.
   3. e-Cert (Organisational), e-Cert (Encipherment):
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-17CRL2.crl
   4. e-Cert (Organisational) with MR Status:
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-15CRL2.crl
   5. e-Cert (Organisational Role):
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-15CRL2.crl
   6. Bank-Cert (Personal):
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-15CRL1_<xxxxx>.crl where <xxxxx> is a string of five alphanumeric characters.
   7. Bank-Cert (Corporate), Bank-Cert (Bank):
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-15CRL2.crl
   8. iAM Smart-Cert:
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-19CRL1_<xxxxx>.crl where <xxxxx> is a string of five alphanumeric characters.
2. Full CRLs:
   1. Certificates issued by Sub CA "Hongkong Post e-Cert CA 2 - 15":
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-15CRL1.crl
   2. Certificates issued by Sub CA "Hongkong Post e-Cert CA 2 - 17":
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-17CRL1.crl
   3. Certificates issued by Sub CA "Hongkong Post e-Cert CA 2 - 19":
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-19CRL1.crl
   4. Certificates issued by Sub CA "Hongkong Post e-Cert CA 2 - 26":
      http://trialcrl1.eCert.gov.hk/crl/eCertCA2-26CRL1.crl
   5. Certificates issued by Sub CA "Hongkong Post e-Cert SSL CA 3 - 17":
      http://trialcrl1.eCert.gov.hk/crl/eCertSCA3-17CRL1.crl
   6. Certificates issued by Sub CA "Hongkong Post e-Cert EV SSL CA 3 - 17":
      http://trialcrl1.eCert.gov.hk/crl/eCertESCA3-17CRL1.crl

For enquiries, please call HKPCA e-Cert Customer Service at 2921 6633 during office hours or email to enquiry@eCert.gov.hk.

| Back | Top |

| Certizen Limited | Hongkong Post |

| 2007 © | Important Notices | Privacy Policy |

End of Page