HKCA d-Cert (Server)

HKCA d-Cert (Server) certificate is issued to Bureaux and Departments of the Government of Hong Kong SAR, organisations that hold a valid business registration certificate issued by the Government of the Hong Kong SAR and statutory bodies of Hong Kong whose existence is recognized by the laws of Hong Kong SAR (a “Subscriber Organisation”); and that wish to have a certificate issued in a server name, or multiple server names, owned by that organisation.

Applicants may choose from the following d-Cert types according to their needs during the application:

  • HKCA Domain Validation (DV) d-Cert (Server)
  • HKCA Domain Validation (DV) d-Cert (Server) with “Wildcard” feature
  • HKCA Domain Validation (DV) d-Cert (Server) with “Multi-domain” feature
  • HKCA Organisation Validation (OV) d-Cert (Server)
  • HKCA Organisation Validation (OV) d-Cert (Server) with “Wildcard” feature
  • HKCA Organisation Validation (OV) d-Cert (Server) with “Multi-domain” feature
  • HKCA Extended Validation (EV) d-Cert (Server)
  • HKCA Extended Validation (EV) d-Cert (Server) with “Multi-domain” feature

d-Cert (Server) certificate contains the following information of the Subscriber Organisation:

DV d-Cert (Server) OV d-Cert (Server) EV d-Cert (Server)
  • A unique Subscriber Reference Number
  • A unique Subscriber Reference Number
  • A unique Subscriber Reference Number
  • Server Name
  • Server Name
  • Server Name
  • Subscriber Organisation’s name
  • Subscriber Organisation’s name
  • Place of business
  • Business category (“Private Organization”, “Government Entity” or “Business Entity”).

 

Summary of HKCA d-Cert (Server) Features

DV d-Cert (Server) DV d-Cert (Server) with “Wildcard” feature DV d-Cert (Server) with “Multi-Domain” feature OV d-Cert (Server) OV d-Cert (Server) with “Wildcard” feature OV d-Cert (Server) with “Multi-Domain” feature EV d-Cert (Server) EV d-Cert (Server) with “Multi-Domain” feature
Certificate Features Support “OCSP” ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔
“digital signature”
Key Usage#		 ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔
Support display of organization name in Chinese or English language on d-Cert ✔ ✔ ✔ ✔ ✔
Support Chinese domain name ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔
Support “Wildcard” server name ✔ ✔
Identify multiple server names (maximum 50) ✔ ✔ ✔

 

Subscription Fees of HKCA d-Cert (Server)

 

Types of d-Cert (Server) Subscription Fee with a 1-year validity period
DV d-Cert (Server) HK$2500
d-Cert (Server) with “Wildcard” feature HK$8,265 per certificate
+
HK$475 for Each Additional Server
Notes: d-Cert (Server) with “Wildcard” feature can be used in one server by default. Extra fee per additional server applies if it is to be used in more than one server, and that the extra fee per additional server shall be applied for the whole subscription period of the certificate regardless of when the certificate is to be used in the additional servers.
d-Cert (Server) with “Multi-domain” feature HK$3,000
+
HK$2,500 for Each Additional Server Name
Notes: d-Cert (Server) with “Multi-domain” feature identifies one server name by default. Extra fee per additional server name applies if more than one, but not more than 50, server names are to be identified in the certificate.
OV d-Cert (Server) HK$2500
OV d-Cert (Server) with “Wildcard” feature HK$8,265 per certificate
+
HK$475 for Each Additional Server
Notes:d-Cert (Server) with “Wildcard” feature can be used in one server by default. Extra fee per additional server applies if it is to be used in more than one server, and that the extra fee per additional server shall be applied for the whole subscription period of the certificate regardless of when the certificate is to be used in the additional servers.
OV d-Cert (Server) with “Multi-domain” feature HK$3,000
+
HK$2,500 for Each Additional Server Name
Notes: d-Cert (Server) with “Multi-domain” feature identifies one server name by default. Extra fee per additional server name applies if more than one, but not more than 50, server names are to be identified in the certificate.
(EV) d-Cert (Server) HK$2,700 per certificate
(EV) d-Cert (Server) with “Multi-domain” feature HK$3,500
+
HK$2,500 for Each Additional Server Name
Notes: (EV) d-Cert (Server) with “Multi-domain” feature identifies one server name by default. Extra fee per additional server name applies if more than one, but not more than 50, server names are to be identified in the certificate.

 

Note: The inclusion of the HKCA Root CA certificate in mainstream web browsers is currently in progress. In other words, when users visit websites installed with the HKCA d-Cert (Server) certificate, web browsers may display security warnings or require manual intervention while establishing secure connections. Meanwhile, users operating their own application systems must manually add the HKCA Root CA certificate to the trusted certificate store of their systems and explicitly trust the HKCA Root CA certificate to ensure proper validation. HKCA Root certificates can be download from here.

Reliance Limit of HKCA d-Cert (Server)

The “Reliance Limit” as defined under the Electronic Transactions Ordinance in respect of one DV d-Cert (Server) certificate is HK$200,000.

Certification Practice Statement

To know more about our practices in issuing the HKCA d-Cert (Server), please refer to the d-Cert Certification Practice Statement (CPS).

Click here to log in d-Cert Subscriber Portal to register or submit d-Cert (Server) application.