Disclosure Records of WebTrust Assessment Reports
In line with the information disclosure requirements for a Certification Authority, as set out in the Baseline Requirements for the Issuance and Management of Publicly
Trusted Certificates published by the CA/Browser Forum, HKCA makes its Certification Practice Statements publicly available.
HKCA also discloses its commitment to issuing publicly trusted certificates, including SSL/TLS certificates, in full compliance with the applicable Baseline Requirements.
Audits and Compliance Reports
Audit Report and Management's Assertions - Root Key Generation Ceremony on 20 October, 2025
Consolidated RKGC Report and MAs.pdf
Download
WebTrust for CA Operation for HKCA – Audit Report and Management’s Assertions on 2 January 2026
Consolidated Report&MA_WTCA.pdf
Download
WebTrust for SSL Baseline Requirements for HKCA – Audit Report and Management’s Assertions on 2 January 2026
Consolidated Report&MA_WTTLS.pdf
Download
WebTrust for Extended Validation SSL for HKCA – Audit Report and Management’s Assertions on 2 January 2026
Consolidated Report&MA_WTEVTLS.pdf
Download
WebTrust for Network and Certificate System Security Requirements for HKCA – Audit Report and Management’s Assertions on 2 January 2026
Consolidated Report&MA_WTNS.pdf
Download