Revoked CA Certs
eCA Self-issued Cert (eCA-G1 to eCA-G2, RSA 4096 w/SHA-256)
• Add 3 AAL CP OIDs and remove CA/Browser Forum EV SSL CP OID
• Revoked on June 12, 2026
• SHA-256: 18467C4E64D586C844A44466DE5BA7A6D5969C7A92859A511C5FDAD75B03CDCE
• Serial number: 00 af cd 8d 64 2c 62 d6 45 06 7d c8 57 fd a8 f1 5d
• Validity:
Not Before: Nov 17 16:51:35 2015 (GMT+8)
Not After : Dec 20 10:31:27 2034 (GMT+8)
eCA Self-issued Cert (Old with New, RSA 4096 w/SHA-256)
• Revoked on June 12, 2026
• SHA-256: 72D716F7BB6BD105704F42B9524923510DCB85B2D870C0E9ADA5AEB9C969051A
• Serial number: 00 ed b8 f4 6f 99 dd 6a 9a a7 62 3e 3f 2c 11 d0 5c
• Validity:
Not Before: Nov 17 16:51:35 2015 (GMT+8)
Not After : Dec 20 10:31:27 2034 (GMT+8)
eCA Self-issued Cert (eCA-G2 to eCA-G1, RSA 4096 w/SHA-256)
• Add 3 AAL CP OIDs and remove CA/Browser Forum EV SSL CP OID
• Revoked on June 12, 2026
• SHA-256: B9C974DE139F6308D74CCC423C3BC0BDED5E7AB4AD738B304B50D429C42C3D66
• Serial number: 18 90 74 02 b0 83 ec 8b ce 19 94 de af c0 a1 d7
• Validity:
Not Before: Nov 17 16:51:35 2015 (GMT+8)
Not After : Dec 20 10:31:27 2034 (GMT+8)
eCA-G1 to HiPKI RCA-G1 Cross-certified Cert (RSA 4096 w/SHA-256)
• Revoked on June 12, 2026
• SHA-256: 6807C97235C5EC6090269A4B5FEDFAB46986E42F4D67D2EDDDCF6E45CF0DFA80
• Serial number: 23 fb a6 48 36 0e 15 e9 2b a7 8a ed b6 7a 0a e5
• Validity:
Not Before: Dec 21 10:11:23 2023 (GMT+8)
Not After : Dec 19 23:59:59 2034 (GMT+8)
CHT SMIME CA-G1 Cert (RSA 4096 w/SHA-256)
• Subordinate/Intermediate CA Certificate (Chain: eCA-G2 to CHT SMIME CA-G1);Update the CA/B Forum S/MIME BR CP OID
• Revoked on April 23, 2026
• SHA-256: 4AB2728FEC2114769461A2F5C2F51322497C7B923A0D8153E238F2AB073E3C2F
• Serial number: 38 78 d7 6c 81 39 e4 15 89 8a 37 34 5e 51 46 50
• Validity:
Not Before: Jan 7 11:11:12 2021 (GMT+8)
Not After : Dec 30 00:00:00 2037 (GMT+8)
CHT SMIME CA-G2 Cert (RSA 4096 w/SHA-256)
• Subordinate/Intermediate CA Certificate (Chain: eCA-G4 to CHT SMIME CA-G2)
• Revoked on April 23, 2026
• SHA-256: 15DC43B3BDA29DF4546008A4FC306DE811F3E78D804E1B989C2DE11D5336DA1A
• Serial number: 09 d9 4e ad 4f 0a 92 6b 3c c6 38 7c 35 82 ea b5
• Validity:
Not Before: Dec 21 10:29:51 2023 (GMT+8)
Not After : Dec 21 23:59:59 2038 (GMT+8)
GTLSCA-G1 Cert (RSA 4096 w/SHA-256)
• Subordinate/Intermediate CA Certificate (Chain: eCA-G2 to GTLSCA-G1)
• Revoked on April 23, 2026
• SHA-256: 9d1cda1b9ef395afce7de0fe74de6d9ff5e0d2a43789116c00c6ba5bf44b9823
• Serial number: 00 99 6d 5f e9 ad e1 6c dc 8e cd bf ed b1 4a 32 95
• Validity:
Not Before: Jul 19 14:46:45 2019 (GMT+8)
Not After : Aug 19 14:46:45 2031 (GMT+8)
CHT Trust TLS CA-G1 Cert (RSA 4096 w/SHA-256)
• Intermediate CA Certificate & Revoked on March 12, 2026
• SHA-256: D2 42 A4 AB C8 7E AB B3 4E 34 C0 9E 28 F9 3F A5 D2 76 4D 04 73 84 A9 60 6E 95 8C 27 A1 41 15 BE
• Serial number: 00 d0 ec 5a 22 43 fb d0 5a b8 94 96 81 18 96 12 3d
• Validity:
Not Before: Aug 25 14:52:14 2025 (GMT+8)
Not After : Aug 25 23:59:59 2028 (GMT+8)
PublicCA-G1 Cert (RSA 2048 w/SHA-1)
• Intermediate CA Certificate (Chain: eCA-G1 to PublicCA-G1) & Revoked on March 12, 2026
• SHA-256: 4b d1 6f 49 55 f3 f3 c9 c8 ea 48 ef 99 95 32 4d a5 12 17 24 f8 99 15 d5 f2 c9 1e b0 ba ef 23 37
• Serial number: 00 97 3c c9 4d 44 cf e9 a2 e1 4f 52 e9 a5 94 a1 5a
• Validity:
Not Before: May 16 18:13:55 2007 (GMT+8)
Not After : May 16 18:13:55 2027 (GMT+8)
eCA Self-issued Cert (eCA-G2 to eCA-G1, RSA 4096 w/SHA-256)
• Add AATL usage CP OID: 1.3.6.1.4.1.23459.100.0.9
• Revoked on December 16, 2025
• SHA-256: D108C34A58C0E4A616449F8C48318023A229C86CD3DDD5D5FE6041A401C16A14
• Serial number: 00 ca e1 f7 3e fc ac 5b b1 9c 88 c1 c7 2f 6f 7b 2f
• Validity:
Not Before: Nov 17 16:51:35 2015 (GMT+8)
Not After : Dec 20 10:31:27 2034 (GMT+8)
HiPKI EV TLS CA Self-signed Cert(RSA 4096 with SHA-256)
• Issued by HiPKI RCA-G1 & Revoked on May 19, 2023 .
• SHA-256: 2a8e6a86e74d10edb2026c81693d64957a0f081c1631912ac95efdfcb5625657
• Serial Number: 3c 43 cd cd dc f2 3b 00 4f 0e a0 73 fc 3e a3 89
Previous Versions of CP/CPS
HiPKI CP/CPS v1.05
• 2025-08-25 PMA approved.
• Add the certificate information for our newly generated CAs: CHT TrustRoot CA and CHT Trust TLS CA.
HiPKI CP/CPS v1.0
• 2025-08-18 PMA approved.
• A combined version of the latest versions of HiPKI CP and HiPKICA CPS
HiPKICA CPS v1.0
• 2024-08-27 approved by the Ministry of Digital Affairs, approval document number"數授產經字第1130005512號".
• This version covers CHT PMA approved CHTCA CPS v0.97.
HiPKICA CPS v0.95
2023-05-12 approved, this version integrates HiPKI RCA CPS v1.17 and HiPKI OV TLS CA CPS documents.
HiPKI EV TLS CA CPS v1.18
2022-08-30 approved, where its CA certificate has been announced to be revoked on May 19, 2023.
CHTCA CPS v1.3
• 2025-10-29 approved by the Ministry of Digital Affairs, approval doc. number"數授產經字第1140010405號".
• This version covers CHT PMA approved CHTCA CPS v1.2.
CHTCA CPS v1.1
• 2024-08-27 approved by the Ministry of Digital Affairs, approval doc. number"數授產經字第1130005511號".
• This version covers CHT PMA approved CHTCA CPS v1.07.
CHTCA CPS 1.0
2023-04-06 approved by the Ministry of Digital Affairs, approval doc. number"產經字第1124000213號".

致電專線: