Disclosure Records of Recognized Certification Authorities
Disclosure Record for Digi-Sign Certification Services Limited
(This is page 6 of the disclosure record for Digi-Sign Certification Services Limited ("Digi-Sign") maintained by the Government Chief Information Officer under section 31(1) of the Electronic Transactions Ordinance (Cap. 553) ("Ordinance"). Click this link to go back to page 1 of the disclosure record.)
Assessment Report in relation to the Planned Extension of the Validity Period of ID-Cert Digital Certificates and the Planned Revision of the Certificate Renewal Process for ID-Cert Digital Certificates
Digi-Sign planned to:
- extend the validity period of its Personal ID-Cert Class 1, Organizational ID-Cert Class 2 and Encipherment ID-Cert Class 3 digital certificates (which are collectively referred to as "ID-Cert" hereafter) from 2 years to 3 years; and
- adopt an online certificate renewal model for its certificate renewal process to allow subscribers to renew their certificates through electronic means.
In accordance with section 5.6 of the Code of Practice for Recognized Certification Authorities ("Code of Practice"), Digi-Sign had arranged the preparation of an assessment report by an independent assessor in respect of its planned changes as described in sub-paragraphs (a) and (b) above.
Only those parts of the assessment report containing material information are herewith published pursuant to section 31(2) of the Ordinance.
A. Date of the Report
- The date of the report is 12 March 2004.
B. Material Information
- Based on the review tasks performed by the assessor, no outstanding significant exceptions came to the attention of the assessor that would adversely affect Digi-Sign's capability to comply with the Code of Practice concerning the trustworthiness of the Digi-Sign CA system as a result of the planned extension of the validity period of ID-Cert digital certificates and the planned revision of the certificate renewal process for ID-Cert digital certificates.
