Digital Certificate (Encipherment)
Digital Certificate (d-Cert) (Encipherment) is intended for use by Bureaux and Departments of the Government of the Hong Kong SAR, organisations holding a valid Business Registration Certificate issued by the Government of the Hong Kong SAR, and statutory bodies of the Hong Kong SAR whose existence is recognised under Hong Kong law (each a “Subscriber Organisation”).
This certificate identifies a unit of the Subscriber Organisation (the “Authorised Unit”) that has been duly authorised to use the d-Cert (Encipherment) solely for the following purposes:
- To send encrypted electronic messages to the Subscriber Organisation;
- To enable the Subscriber Organisation to decrypt encrypted electronic messages; and
- To allow the Subscriber Organisation to acknowledge receipt of encrypted electronic messages by issuing a digitally signed confirmation, thereby verifying the identity of the receiving
Subscriber Organisation.
SUBSCRIBING ORGANISATIONS UNDERTAKE TO HONG KONG CERTIFICATION AUTHORITY NOT TO AUTHORISE THE AUTHORISED USERS TO USE DIGITAL SIGNATURE OF THIS CLASS OF CERTIFICATE FOR ANY PURPOSE OTHER THAN ACKNOWLEDGING RECEIPT OF MESSAGES AS STIPULATED ABOVE. ACCORDINGLY, ANY DIGITAL SIGNATURE GENERATED BY THE PRIVATE KEY OF THIS CLASS OF CERTIFICATE USED FOR ANY OTHER PURPOSE MUST BE TREATED AS A SIGNATURE GERERATED AND USED WITHOUT THE AUTHORITY OF THE SUBSCRIBER ORGANISATION AND SHALL BE REGARDED AS AN UNAUTHORISED SIGNATURE FOR ALL PURPOSES.
Furthermore, digital signatures generated by this class of certificate may be used solely for acknowledging receipt of electronic messages in transactions that are not related to, or connected with, online payment of money, online investment, or the online conferring of any financial benefits on any person or entity. Under no circumstances may digital signatures generated by these certificates be used to acknowledge receipt of messages sent in connection with the negotiation or conclusion of any contract or other legally binding agreement.
A d-Cert (Encipherment) contains the following information relating to the Subscriber Organisation:
- Name of the Authorised Unit;
- Name of the Subscriber Organisation;
- Branch or department name of the Subscriber Organisation;
- Company or Business Registration Number of the Subscriber Organisation;
- Email address; and
- Unique Subscriber Reference Number.
Eligibility for d-Cert (Encipherment)
The d-Cert (Encipherment) is intended for organisations that require secure exchange of encrypted electronic messages. It is suitable for Bureaux and Departments of the Government of the Hong Kong SAR, organisations holding a valid Business Registration Certificate issued by the Government of the Hong Kong SAR, and statutory bodies whose existence is recognised under Hong Kong law. The certificate is issued to a subscriber organisation and identifies an authorised unit that has been duly authorised to use the certificate for encryption‑related purposes on behalf of the organisation.
Benefits of Using a d-Cert (Encipherment)
The use of a d-Cert (Encipherment) enables organisations to safeguard the confidentiality and integrity of electronic communications through encryption. It supports the secure transmission and decryption of electronic messages and allows acknowledgement of receipt of encrypted messages by means of digitally signed confirmations.
By using this certificate, organisations can enhance information security, reduce the risk of unauthorised access or data interception, and establish trust in electronic communications, while ensuring that digital signatures are used strictly for non‑financial and non‑contractual message acknowledgement purposes.
Reliance Limit of d-Cert (Encipherment)
The “Reliance Limit”, as defined under the Electronic Transactions Ordinance, in respect of each d-Cert (Encipherment) is HK$200,000.
Document required for the d-Cert (Encipherment) application
If the Applicant is a company registered in Hong Kong :
- Copy of Business Registration Certificate issued by the Inland Revenue Department
- Copy of Certificate of Incorporation / Certificate of Registration issued by the Companies Registry (applicable to limited companies)
- Completed, signed and stamped Authorisation Letter designating the authorised representation
If the Applicant is a bureau or department of the HK SAR Government :
- A memo signed by the Departmental Secretary (or staff at equivalent rank or above) and endorsed with department chop designating the Authorised Representative
If the Applicant is a statutory body in Hong Kong:
- Copy of the ordinance(s) under which the statutory body was established
- Completed, signed and stamped Authorisation Letter
Certification Practice Statement
For further information on our practices relating to the issuance of the d-Cert (Encipherment), please refer to the d-Cert Certification Practice Statement (CPS).