1 January 2012

As a certification authority recognized under the Electronic Transactions Ordinance of the Hong Kong Special Administrative Region, Digi-Sign Certification Services Limited ("Digi-Sign") is dedicated to implementing the best practices of Public Key Infrastructure commonly adopted worldwide.

According to recommendation made by National Institute of Standards and Technology's (NIST) in Special Publication 800-131, the industry should not use RSA keys with key length less than 2048 bits to generate digital signatures after 31 December 2013. To support higher level security in performing electronic transactions, Digi-Sign will implement the following plan on the issuance of 2048-bit ID-Certs:

For the avoidance of doubt, subscribers can continue to use their existing 1024-bit ID-Certs until their natural expiry.

Subscribers who wish to use 2048-bit ID-Certs are advised to contact their respective relying parties to confirm the readiness of their systems or applications on the support of 2048-bit certificates.

For parties relying on ID-Certs, they can make arrangement, if any and as appropriate, on their systems or applications to support 2048-bit certificates. Should they need any advice or technical support, they can contact Digi-Sign Hotline at 2917 8833.

Digi-Sign Certification Services Limited