HKCA d-Cert (Server) old

HKCA d-Cert (Server) certificate is issued to Bureaux and Departments of the Government of Hong Kong SAR, organisations that hold a valid business registration certificate issued by the Government of the Hong Kong SAR and statutory bodies of Hong Kong whose existence is recognized by the laws of Hong Kong SAR (a “Subscriber Organisation”); and that wish to have a certificate issued in a server name, or multiple server names, owned by that organisation.

Applicants may choose the following during the application:

  1. d-Cert (Server)
  2. d-Cert (Server) with “Wildcard” feature
  3. d-Cert (Server) with “Multi-domain” feature
  4. Extended Validation d-Cert (Server)
  5. Extended Validation d-Cert (Server) with “Multi-domain” feature

An d-Cert (Server) certificate contains the following information of the Subscriber Organisation:

  • The Server name(s) (including domain name of the server(s)) owned by the Subscriber Organisation;
  • Subscriber Organisation’s name;
  • Branch name or department name of the Subscriber Organisation;
  • Subscriber Organisation’s company/business registration number; and
  • A unique Subscriber Reference Number.

An Extended Validation d-Cert (Server) certificate contains the following additional information of the Subscriber Organisation:

  • Place of business; and
  • Business category (“Private Organization”, “Government Entity” or “Business Entity”).

Summary of HKCA d-Cert (Server) Features

# Note: The “digital signature” Key Usage is to be used only for server authentication and for establishment of secure communication channels with the server.

Subscription Fees of HKCA d-Cert (Server)

Supported Web Browsers

Common web browsers as listed below now come with the HKCA root certificate included: –

  • Google Chrome and other supported web browsers on Android 11 or above
  • Microsoft Edge and other supported web browsers on Windows 10 or above
  • Apple Safari and other supported web browsers on iOS 15 or above, iPadOS 15 or above, macOS 12 or above
  • Mozilla Firefox version 68 or above on all supported platforms

Users of the supported web browsers visiting websites that are installed with the HKCA d-Cert (Server) certificate will be free from certain alert messages or manual intervention when their browsers establish a secure connection to these websites. All users are recommended to upgrade their web browsers to a Supported Web Browser as soon as possible, if they have not done so.

For subscribers or relying parties who run their application systems that explicitly trust HKCA Root certificates, they are reminded to include all relevant root certificates of HKCA in their trust lists. HKCA Root certificates can be download from here.

Reliance Limit of HKCA d-Cert (Server)

The “Reliance Limit” as defined under the Electronic Transactions Ordinance in respect of one d-Cert (Server) certificate is HK$200,000.

Certification Practice Statement

To know more about our practices in issuing the d-Cert (Server), please refer to the d-Cert Certification Practice Statement (CPS).

  • Click here to download the application form.