Date: 6 January 2010
Hongkong Post Certification Authority Sub CANote 1 Rollover on 26 February 2010
- IMPLEMENTATION PLAN FOR SUB CA "HONGKONG POST E-CERT CA 1" ROLLOVER
- HONGKONG POST CERTIFICATE REVOCATION LIST
- RELEVANT QUESTIONS AND ANSWERS
Note 1: Sub CA refers to the subordinate certification authority certificate which is issued by the Root CA "Hongkong Post Root CA 1" and is used to sign the Hongkong Post Recognized Certificates.
|A.||Implementation Plan for Sub CA "Hongkong Post e-Cert CA 1" Rollover|
On 16 June 2009, Hongkong Post Certification Authority announced the arrangement to perform rollover of the Sub CA "Hongkong Post e-Cert CA 1" in February 2010. The implementation plan for the Sub CA rollover is set out herein as follows:
Relying Parties should be aware of the following areas related to the Sub CA rollover:
Relying Parties should ensure the relying applications be able to support Recognized Certificates and CRLs issued by the existing and new Sub CA after the Sub CA rollover.
Meanwhile, relying parties can contact Hongkong Post CA hotline 2921 6633 or email to email@example.com for any assistance on supporting Hongkong Post Recognized Certificates signed by the new Sub CA.
|B.||Hongkong Post Certificate Revocation List (CRL)|
Under normal circumstances, Hongkong Post will publish the latest CRL as soon as possible after the update time mentioned below. Hongkong Post may need to change the updating and publishing schedule of the CRL without prior notice if such changes are considered to be necessary under unforeseeable circumstances.
Certificate Revocation List supported by "Hongkong Post e-Cert CA 1 - 10"
Hongkong Post will update and publish the following Certificate Revocation Lists (CRLs) issued by the Sub CA "Hongkong Post e-Cert CA 1 - 10" containing information of suspended or revoked e-Certs and Bank-Certs 3 times daily at 09:15, 14:15 and 19:00 Hong Kong Time (i.e. 01:15, 06:15 and 11:00 Greenwich Mean Time (GMT or UTC)):-
Certificate Revocation List supported by "Hongkong Post e-Cert CA 1"
The Sub CA "Hongkong Post e-Cert CA 1" will cease to issue Recognized Certificates with effect from 26 February 2010, but will continue the existing practice to issue the following Certificate Revocation Lists (CRLs) containing information of suspended or revoked e-Certs and Bank-Certs 3 times daily at 09:15, 14:15 and 19:00 Hong Kong Time (i.e. 01:15, 06:15 and 11:00 Greenwich Mean Time (GMT or UTC)) until its expiry:-
Relevant Questions and Answers
Relevant questions and answers related to Sub CA rollover can be found in Section B of the announcement on 16 June 2009. Further questions and answers related to Sub CA rollover can be referred as follows:
1. Will there be any services affected for the Sub CA rollover on 26 February 2010?
HKPCA website and online services will be under maintenance between 11:00 p.m. 25 February 2010 and 1:00 a.m. 26 February 2010 for two hours. However, CRLs and repository services will not be affected during the Sub CA rollover process.
2. Will the existing Sub CA continue to update and publish CRLs after the Sub CA rollover?
Yes. The existing Sub CA will continue to update and publish CRLs until end of its lifetime on 15 May 2013.