About Hong Kong Certification Authority (HKCA)
Hong Kong Certification Authority (HKCA) is a trusted Certificate Authority recognised by the Digital Policy Office, delivering world‑class digital certificate solutions for individuals and organisations in Hong Kong and beyond.
🔒 Security You Can Trust
Our certificates use industry‑leading encryption to protect digital transactions and communications at the highest security standards.
✓ Government Approved
Officially approved by the Digital Policy Office for identity validation and authentication in digital transactions.
🌐 Broad Compatibility
Fully compatible with all major browsers, operating systems, and platforms for smooth and reliable integration.
🎯 Professional Support
Our dedicated technical support team provides expert assistance with implementation, troubleshooting, and certificate management.
Types of Digital Certificates
Digital Certificate (Personal)
A digital identity certificate for individuals. It is commonly used for secure email (Secure/Multipurpose Internet Mail Extensions), digital document signing, and authentication when accessing protected online services.
Digital Certificate (Organisational)
A certificate that verifies the identity of an organisation. It supports trusted business communications, secure transactions, and organisational authentication.
Digital Certificate (Encipherment)
A certificate dedicated to data encryption. It is used to protect sensitive information during transmission or storage by ensuring confidentiality.
Application and Usage
New d-Cert Application
New applicants must complete and submit the online application through the d‑Cert Subscriber Portal, together with the required supporting documents and application fees.
Install your d-Cert
Follow the instructions in the relevant Digital Certificate User Guide to install your certificate in supported internet browsers.
Search and Download d-Cert
Search and download certificates to verify digital signatures you receive or to send encrypted messages securely.
Resources
Use Cases
Online Banking
Securing Retail Online Banking
Industry:
Finance & Banking
Digital certificates are used to provide strong customer authentication, digitally signed payment instructions, and encrypted account statements and messages.
Benefits:
Secure, phishing‑resistant access; legally binding transactions through non‑repudiation;
and strong protection of customer data, especially for high‑value transactions.
E-Government Services
Secure Digital Identity for Citizens and Businesses
Industry:
E-Government
Enable citizens and businesses to log in securely, submit online forms, and sign applications, filings, and contracts using legally recognised digital signatures.
Benefits:
Faster and paperless services, verified identities and data integrity, reduced fraud, and lower administrative effort.
Healthcare Provider e-Services
Trusted Digital Security for Healthcare
Industry:
Healthcare
Issue digital certificates to healthcare professionals and staff for secure system access, encrypted and signed emails, and digitally signed medical documents such as orders, prescriptions, consent forms, and medical certificates.
Benefits:
Protected patient confidentiality, clear accountability through non‑repudiation, and efficient, audit‑ready clinical workflows.
Frequently Asked Questions
Domain Validation (DV): Verifies control of the domain only.
Organisation Validation (OV): Verifies domain ownership AND the legal identity of the organisation. It provides more trust.
Extended Validation (EV): The highest level of validation. It requires a strict verification of the organisation’s legal and operational identity. EV certificates are ideal for e-commerce and financial sites.
The d-Cert (Personal) certificates are used to verify your individual identity. Common uses include:
1. Secure Email (S/MIME): Ensuring authenticity by digitally signing your emails and protect confidentiality by encrypting them for the intended recipient.
2. Document Signing: Applying a legally valid digital signature to documents (like PDFs).
3. Client Authentication: Authenticating yourself to secure web portals or networks (2FA).