Hongkong Post e-Cert (Server) with "Wildcard" Feature
e-Cert (Server) with "Wildcard" feature enables the use of the certificate for all server names at the same domain or sub-domain level owned by the Subscriber Organisation, with validity of 1 year. The left-most component of the fully qualified domain name of the server name must be a wildcard character (i.e. an asterisk "*", the wildcard component). The issued certificate will include the server name without the wildcard component of the applied server name.
For example, an e-Cert (Server) with "Wildcard" feature issued to *.eCert.gov.hk can be used for all server names of the same domain name eCert.gov.hk, such as:
- An e-Cert (Server) with "Wildcard" feature can be used in one server by default. If the certificate is to be used in multiple servers, subscription fee per additional server is required, and the number of additional servers has to be specified in the application. In counting the number of additional server for e-Cert (Server) with "Wildcard" feature, if the certificate is to be installed in any additional physical server or virtual machine that operates on a separate operating system from the default server, then each such physical server or virtual machine is chargeable.
- Subscriber may increase the number of additional servers at any time within the validity period of the certificate provided that the subscription fee per additional server covering the whole validity period of the certificate is paid.
- The certificate contains "digital signature" Key Usage, Subject Alternative Name field and Extended Key Usage field in the certificate. For details, please refer to Appendix B of the Certification Practice Statement ("CPS")
- The digital signatures supported by an e-Cert (Server) with "Wildcard" feature are to be used only for server authentication and for establishment of secure communication channels with the server. The digital signatures cannot be used for negotiation or conclusion of a contract or any legally binding agreement or any monetary transactions.