A Digital Signature Certificate (DSC) is a secure digital key issued by a licensed Certifying Authority that validates the identity of the holder and lets them sign electronic documents. It is the legally recognised electronic equivalent of a handwritten signature under the Information Technology Act, 2000.
If you are registering a company, filing GST or income tax returns as an organisation, bidding on government tenders, or filing with the MCA, a DSC is mandatory. This guide explains what a DSC is, its classes, validity and how to obtain one.
What is What is a Digital Signature Certificate (DSC)? A complete guide?
A DSC contains the holder's name, public key, the issuing Certifying Authority's details and an expiry date. When you sign a document with your DSC, it attaches an encrypted, tamper-evident stamp that proves the document came from you and has not been altered.
DSCs in India are issued by licensed Certifying Authorities (such as eMudhra, Sify, Capricorn and others) under the supervision of the Controller of Certifying Authorities (CCA), which operates under the Ministry of Electronics and Information Technology.
| Legal basis | Information Technology Act, 2000 |
|---|---|
| Regulator | Controller of Certifying Authorities (CCA) |
| Common class | Class 3 (standard for most filings) |
| Validity | Usually 1, 2 or 3 years |
| Storage | FIPS-compliant USB crypto token |
Who needs a DSC
- Directors and shareholders incorporating a company on the MCA portal
- Businesses filing GST returns or registering as a company/LLP
- Professionals and companies filing income tax returns that require digital signing
- Importers and exporters filing on the DGFT portal
- Vendors bidding on e-tenders and the Government e-Marketplace (GeM)
- Anyone signing legally binding electronic documents
Documents required
- PAN card of the applicant
- Aadhaar / passport / voter ID / driving licence as address proof
- Recent passport-size photograph
- Email ID and mobile number for OTP verification
- For organisational DSC: authorisation letter and business registration proof
Step-by-step process
- Choose class and validity. Select a Class 3 DSC and a validity period (1–3 years) based on how long you will need it.
- Submit KYC. Complete identity verification via Aadhaar eKYC, video verification or paper-based KYC with the Certifying Authority.
- Video verification. Record a short video verification as required by CCA guidelines.
- Download to token. Once approved, download the certificate onto a FIPS-compliant USB crypto token.
- Register on the portal. Register the DSC on the relevant portal (MCA, GST, income tax, DGFT) before using it to sign.
Fees and timeline
| Certificate cost | Varies by Certifying Authority and validity |
|---|---|
| USB crypto token | One-time hardware cost |
| Renewal | Payable at the end of the validity period |
A DSC can usually be issued within a few hours to 1–2 working days once video verification and KYC are complete.
Classes of DSC
Earlier there were Class 1, Class 2 and Class 3 certificates. Since January 2021, Class 2 has been discontinued and Class 3 is the standard for almost all statutory and commercial use.
| Class | Use today | Assurance |
|---|---|---|
| Class 1 | Basic email/identity validation (rarely used) | Low |
| Class 2 | Discontinued (merged into Class 3) | — |
| Class 3 | MCA, GST, Income Tax, DGFT, e-tendering, GeM | High |
Signature vs encryption certificates
A DSC can be a Sign-only certificate (to digitally sign documents) or a Sign + Encrypt combo (also used to encrypt data, common in e-tendering). For most filings a Sign certificate is sufficient; e-procurement portals often require the combo.
Frequently asked questions
Is a DSC legally valid?
Yes. A digital signature affixed using a valid DSC is legally recognised under the Information Technology Act, 2000, and is admissible as evidence.
How long is a DSC valid?
Typically 1, 2 or 3 years. You must renew it before expiry to keep filing without interruption.
Can one DSC be used on multiple portals?
Yes. A single Class 3 DSC can be registered and used across MCA, GST, income tax, DGFT and e-tender portals.
Do I need to store the DSC on a USB token?
Yes. As per CCA guidelines, DSCs must be stored on a secure FIPS 140-2 compliant crypto token and cannot be copied to a computer.