About Hong Kong Certification Authority (HKCA)

Hong Kong Certification Authority (HKCA) is a leading and internationally recognised Certification Authority (CA) established by the Hong Kong Internet Registration Corporation Limited (HKIRC) with approval of Digital Policy Office to deliver comprehensive digital trust services. To this extent, HKIRC has been approved and recognized by the Commissioner of Digital Policy (CDP) as a Recognized CA under the Electronic Transactions Ordinance ("ETO") (Cap. 553) of the laws of the Hong Kong Special Administrative Region. HKCA is committed to safeguarding the digital ecosystem by providing advanced encryption technologies, trusted digital certificates, and robust identity verification solutions that enable secure online interactions.

Recognition Status of Hong Kong Certification Authority

​ As a trusted CA, HKCA issues and manages a full range of digital certificates to support secure communications, identity assurance, and data protection. These include Web Server Certificates (SSL/TLS) for website authentication and encryption, Personal Certificates for individual identity verification and secure email, and Organisational Certificates for authenticating businesses and institutions. HKCA also delivers tailored enterprise Public Key Infrastructure (PKI) solutions, designed to meet the complex security and compliance requirements of large organisations.​

​ All HKCA certificate services are delivered through our accredited partners and secure, trusted platforms, ensuring high standards of governance, reliability, and lifecycle management. Through these services, HKCA enables businesses, governments, and individuals to transact digitally with confidence, trust, and assurance.

🎯

Our Mission

Our mission is to deliver trusted, accessible, and high‑assurance digital identity and encryption solutions. Guided by the principles of security, reliability, customer focus, and operational excellence, HKCA is committed to strengthening digital trust, advancing cryptographic standards, and promoting secure online practices.

📋

Our Objectives

HKCA is committed to delivering robust digital certificate and identity management services to support the local and global Internet community. Our objectives are to:

  • ​Promote Hong Kong as a trusted hub for secure e‑commerce by raising public awareness and encouraging the adoption of digital security technologies.

  • Design, develop, and operate a high‑availability, secure, and trusted Public Key Infrastructure (PKI).​

  • Manage the end‑to‑end lifecycle of digital certificates, including issuance, renewal, suspension, and revocation, in full compliance with recognised international standards such as the CA/Browser Forum and WebTrust.​
  • Appoint, oversee, and support accredited Registration Authorities (RAs) to ensure secure and reliable identity verification and certificate registration services.​
  • Operate and maintain secure timestamping services and Online Certificate Status Protocol (OCSP) services to support real‑time certificate validation.​
  • Maintain close liaison with local and international organisations on the development, governance, and adoption of cryptographic standards and digital trust services.​​
  • Establish and maintain clear administrative and development policies through the Certificate Policy (CP) and Certification Practice Statement (CPS).​
  • Implement effective complaint handling and dispute resolution mechanisms for certificate‑related matters, and provide transparent guidance to all relying parties.
📋

Outsourced Operations of HKCA

Since the establishment of HKCA and the official launch of its digital certificate services, HKIRC has awarded a contract to Certizen Limited (the “Contractor”) as a subservice organisation to provide operations and maintenance services for its CA systems and associated certificate services. The Contractor may use the personal data provided by subscribers only for the purpose of performing its obligations pursuant to the contract for the provision of HKCA services.