Repository / Certificate Revocation List (CRL)
Download Hong Kong Certification Authority (HKCA) Root and Intermediate Certificates and access the Certificate Revocation List (CRL) to check the status of digital certificates.
About the Repository
Under the Electronic Transactions Ordinance, a repository is an information system used to store and retrieve digital certificates and related information. The Hong Kong Certification Authority (HKCA) maintains a repository that contains: (i) A list of digital certificates issued in accordance with the Certification Practice Statement (CPS). (ii) The latest Certificate Revocation List (CRL). Each certificate is published in the repository promptly after it is issued. These resources allow relying parties to verify the validity and status of digital certificates issued by HKCA and to confirm whether a certificate has been revoked.
Root CA Certificates
| CA Name | Validity | Certificate File |
|---|---|---|
| HKCA Root CA 1 | 20/10/2025 - 14/10/2050 | Download .crt |
| HKCA Root CA 2 | 20/10/2025 - 14/10/2050 | Download .crt |
Intermediate / Sub CA Certificates
| CA Name | Validity | Certificate File |
|---|---|---|
| HKCA d-Cert CA 1 - 25 | 04/12/2025 - 30/11/2040 | Download .crt |
| HKCA d-Cert EV SSL CA 2 - 25 | 04/12/2025 - 30/11/2040 | Download .crt |
| （sub）HKCA d-Cert OV SSL CA 2 - 25 | 04/12/2025 - 30/11/2040 | Download .crt |
| HKCA d-Cert DV SSL CA 2 - 25 | 04/12/2025 - 30/11/2040 | Download .crt |
| HKCA d-Cert CA 1 - 25A | 04/12/2025 - 30/11/2040 | Download .crt |
Certificate Revocation Lists (CRL)
| CA Name | Query String for LDAP Service (if available) | Partitioned CRL filename(s), if applicable, as referenced in CRLDP |
|---|---|---|
| HKCA d-Cert OV SSL CA 2 - 25 | cn=HKCA d-Cert OV SSL CA 2 - 25 CRL, o=Hong Kong Internet Registration Corporation Limited, c=HK (HKCAdCertOVSSLCA2-25CRL.crl) | N/A |
| HKCA d-Cert EV SSL CA 2 - 25 | cn=HKCA d-Cert EV SSL CA 2 - 25 CRL, o=Hong Kong Internet Registration Corporation Limited, c=HK (HKCAdCertEVSSLCA2-25CRL.crl) | N/A |
| HKCA d-Cert DV SSL CA 2 - 25 | cn=HKCA d-Cert DV SSL CA 2 - 25 CRL, o=Hong Kong Internet Registration Corporation Limited, c=HK (HKCAdCertDVSSLCA2-25CRL.crl) | N/A |
| HKCA d-Cert CA 1 - 25A | cn=HKCA d-Cert CA 1 - 25A CRL, o=Hong Kong Internet Registration Corporation Limited, c=HK (HKCAdCertCA1-25ACRL.crl) |
HKCAdCertCA1-25ACRL_ |
| HKCA d-Cert CA 1 - 25 | cn=HKCA d-Cert CA 1 - 25 CRL, o=Hong Kong Internet Registration Corporation Limited, c=HK (HKCAdCertCA1-25CRL.crl) |
HKCAdCertCA1-25CRL_ |
| HKCA Root CA 2 | cn=HKCA Root CA 2 ARL, o=Hong Kong Internet Registration Corporation Limited, c=HK (HKCARootCA2ARL.crl) | N/A |
| HKCA Root CA 1 | cn=HKCA Root CA 1 ARL, o=Hong Kong Internet Registration Corporation Limited, c=HK (HKCARootCA1ARL.crl) | N/A |
| HKCA Root CA 1test | cn=HKCA Root CA 1 ARL, o=Hong Kong Internet Registration Corporation Limited, c=HK (HKCARootCA1ARL.crl) | N/A |
LDAP Service
You may access the HKCA Repository via LDAP (Lightweight Directory Access Protocol) at ldap://ldap.hkca.hk