Hongkong Post CA Root Certificate
Each of the e-Certs issued by Hongkong Post bears a digital signature supported by a Hongkong Post CA root certificate that proves the authenticity of the e-Cert. The common browser software installed on your computer supports storage and use of such root certificates. To allow your browser to recognize the e-Certs issued by Hongkong Post, the following Hongkong Post CA root certificates should be installed in your browser on your computer:-
- Hongkong Post Root CA 1
- Hongkong Post Root CA 2
- Hongkong Post Root CA 3
- GlobalSign Root CA - R3
- Hongkong Post Root CA 3 (Cross certificate 2022)
This Root CA is valid for 20 years (15 May 2003 – 15 May 2023) and is required for verifying the Hongkong Post digital signature on the Sub CANote 1 "Hongkong Post e-Cert CA 1 - 10", "Hongkong Post e-Cert CA 1 - 14", "Hongkong Post e-Cert CA 1 - 15" and the expired Sub CA "Hongkong Post e-Cert CA 1".
Hongkong Post e-Cert CA 1 - 10
This Sub CANote 1 is valid from 9 January 2010 to 15 May 2023 and is required for verifying the Hongkong Post digital signature on e-Cert (Personal), e-Cert (Organisational), e-Cert (Encipherment) and e-Cert (Server) issued on or after 26 February 2010.
The words "Hongkong Post e-Cert CA 1 - 10" will be displayed in the "Issuer" field of the above e-Certs.
- Download the "Hongkong Post e-Cert CA 1 - 10" certificate
- Instructions of installation of CA certificates
Hongkong Post e-Cert CA 1 - 14
This Sub CANote 1 is valid from 30 Nov 2014 to 15 May 2023 and is required verifying the Hongkong Post digital signature on SHA-256 e-Cert (Server) issued on or after 1 January 2015.
The words "Hongkong Post e-Cert CA 1 - 14" will be displayed in the "Issuer" field of the above e-Certs.
- Download the "Hongkong Post e-Cert CA 1 - 14" certificate
- Instructions of installation of CA certificates
Hongkong Post e-Cert CA 1 - 15
This Sub CANote 1 is valid from 4 Jul 2015 to 15 May 2023 and is required for verifying the Hongkong Post digital signature on e-Cert (Server) supporting OCSP issued on or after 1 September 2015.
The words "Hongkong Post e-Cert CA 1 - 15" will be displayed in the "Issuer" field of the above e-Certs.
- Download the "Hongkong Post e-Cert CA 1 - 15" certificate
- Instructions of installation of CA certificates
This Root CA is valid for 25 years (5 September 2015 – 5 September 2040) and is required for verifying the Hongkong Post digital signature on the Sub CANote 1 "Hongkong Post e-Cert CA 2 - 15", "Hongkong Post e-Cert CA 2 - 17" and "Hongkong Post e-Cert CA 2 - 19".
Hongkong Post e-Cert CA 2 - 15
This Sub CANote 1 is valid from 5 September 2015 to 5 September 2030 and is required for verifying the Hongkong Post digital signature on Bank-Cert (Personal), Bank-Cert (Corporate) and Bank-Cert (Bank) issued on or after 7 December 2015.
The words "Hongkong Post e-Cert CA 2 - 15" will be displayed in the "Issuer" field of the above Bank-Certs.
- Download the "Hongkong Post e-Cert CA 2 - 15" certificate
- Instructions of installation of CA certificates
Hongkong Post e-Cert CA 2 - 17
This Sub CANote 1 is valid from 12 August 2017 to 12 August 2032 and is required for verifying the Hongkong Post digital signature on e-Cert (Personal), e-Cert (Organisational) and e-Cert (Encipherment) issued on or after 1 February 2019.
The words "Hongkong Post e-Cert CA 2 - 17" will be displayed in the "Issuer" field of the above e-Certs.
Hongkong Post e-Cert CA 2 - 19
This Sub CANote 1 is valid from 29 July 2019 to 29 July 2034 and is required for verifying the Hongkong Post digital signature on iAM Smart-Cert issued on or after 7 October 2020.
The words "Hongkong Post e-Cert CA 2 - 19" will be displayed in the "Issuer" field of the above iAM Smart-Certs.
This Root CA is valid for 25 years (3 June 2017 – 3 June 2042) and is required for verifying the Hongkong Post digital signature on the Sub CANote 1 "Hongkong Post e-Cert SSL CA 3 - 17" and "Hongkong Post e-Cert EV SSL CA 3 - 17".
Hongkong Post e-Cert SSL CA 3 - 17
This Sub CANote 1 is valid from 3 June 2017 to 3 June 2032 and is required for verifying the Hongkong Post digital signature on e-Cert (Server) issued on or after 1 July 2019.
The words "Hongkong Post e-Cert SSL CA 3 - 17" will be displayed in the "Issuer" field of the above e-Certs.
- Download the "Hongkong Post e-Cert SSL CA 3 - 17" certificate
- Instructions of installation of CA certificates
Hongkong Post e-Cert EV SSL CA 3 - 17
This Sub CANote 1 is valid from 3 June 2017 to 3 June 2032 and is required for verifying the Hongkong Post digital signature on Extended Validation e-Cert (Server) issued on or after 21 January 2022.
The words "Hongkong Post e-Cert EV SSL CA 3 - 17" will be displayed in the "Issuer" field of the above e-Certs.
- Download the "Hongkong Post e-Cert EV SSL CA 3 - 17" certificate
- Instructions of installation of CA certificates
Hongkong Post Root CA 3 (Cross certificate 2022)
This cross certificate "Hongkong Post Root CA 3" is valid from 16 November 2022 to 18 March 2029 signed by "GlobalSign Root CA - R3".
- Download the "Hongkong Post Root CA 3" cross certificate
- User Guide for installation of the cross certificate
Expired Hongkong Post e-Cert CA 1
This Sub CANote 1 expired on 15 May 2013. It has been used to issue e-Cert and Bank-Cert in the following periods:-
- e-Cert (Personal) issued between 23 June 2003 and 25 February 2010
- e-Cert (Organisational), e-Cert (Encipherment), e-Cert (Server), Bank-Cert (Personal) and Bank-Cert (Corporate) issued between 12 January 2004 and 25 February 2010.
The words "Hongkong Post e-Cert CA 1" will be displayed in the "Issuer" field of the above e-Certs and Bank-Certs.
Retired Hongkong Post CA Root Certificates
The CA root certificates "Hongkong Post Root CA" and "Hongkong Post e-Cert CA" have been retired and revoked on 31 March 2005.
Download retired CA certificates
Note 1: Sub CA refers to the subordinate certification authority certificate which is issued by the respective Root CA "Hongkong Post Root CA 1" , "Hongkong Post Root CA 2" or "Hongkong Post Root CA 3" and is used to sign the Hongkong Post Recognized Certificates.