Digital Signature Certificates

Digital Signature

A Digital Signature Certificate is required to file almost anything with MCA, DGFT, or government tender portals — but not every DSC is the same. Getting the wrong class or type can mean your filing gets rejected at the last step. 

Digital Signature

4 Services

Class 3 Digital Signature (DSC)

Get a Class 3 DSC for MCA, income tax, and general government portal filings — the most commonly required type.

Startup India DSC

Get a DSC issued for your DPIIT Startup India recognition application and related filings.

Tender DSC

Get a DSC configured for e-tendering portals so you can bid on government and PSU tenders online.

DGFT DSC

Get a DSC registered with DGFT and ICEGATE for your import-export filings and IEC-related transactions.

Understanding digital signature certificates

What this section covers

A Digital Signature Certificate (DSC) is the electronic equivalent of a signature, used to sign documents and filings online. Its legal basis is the Information Technology Act, 2000, which recognises electronic signatures and sets up the Controller of Certifying Authorities (CCA) to license and supervise Certifying Authorities. Only a licensed Certifying Authority can issue a DSC, after verifying the applicant’s identity as per the CCA’s guidelines.

This section covers the certificates most businesses and individuals use:

  • Class 3 DSC – the class currently issued for individuals and organisations after the CCA discontinued Class 2 certificates from 1 January 2021. It is used for MCA filings, income tax, GST, EPFO and most government portals.
  • Tender DSC – a Class 3 certificate that includes both signing and encryption keys, which e-procurement portals generally require for submitting bids.
  • DGFT DSC – a certificate used for signing applications on the DGFT portal, typically in the name of the IEC holder’s authorised signatory.
  • Startup India DSC – a certificate for founders and signatories of new businesses who need to sign incorporation and registration filings.

A DSC is issued on a cryptographic USB token and is valid for a fixed period, commonly one to three years, after which it must be renewed with fresh verification.

Who needs these services

  • Company directors and designated partners, who sign MCA forms such as incorporation documents, annual returns and event-based filings.
  • Taxpayers whose returns or audit reports must be digitally signed, including companies and taxpayers subject to tax audit, as prescribed under income tax rules.
  • Authorised signatories on GST, EPFO and other portals, where a DSC is mandatory or preferred for certain entities.
  • Bidders in government tenders on central and State e-procurement portals and on some public sector platforms.
  • Exporters and importers filing applications with DGFT.
  • Founders of new ventures who need to sign incorporation and registration documents early.
  • Professionals who certify or file documents on behalf of clients.

A DSC is personal to the holder. It should be kept securely and used only by the holder or with their express authority, since filings signed with it are attributed to that person.

How to choose between the services

  • You need to sign MCA, income tax or GST filings: a standard Class 3 DSC (signing only) is generally sufficient.
  • You plan to bid on government tenders: choose a tender DSC with both signing and encryption. Check the specific portal’s requirements, since some ask for an organisation-name certificate.
  • You file on the DGFT portal: a DGFT DSC, issued in the name of the person authorised to act for the IEC holder.
  • You are setting up a new business: a Startup India DSC for each proposed director or partner before incorporation filings begin.
  • Your existing certificate is expiring: apply for renewal before expiry so that pending filings are not delayed. Renewal generally requires fresh identity verification.
  • You are a foreign national director: a Class 3 DSC is still required, but verification involves additional documents such as apostilled or consularised identity proof, as per CCA guidelines.

Validity of one, two or three years can be chosen at the time of application. A longer term reduces renewals but should match the expected need.

Frequently asked questions

Is a Class 2 DSC still available?

No. The Controller of Certifying Authorities discontinued the issue of Class 2 certificates from 1 January 2021, and Class 3 certificates are now issued for purposes that previously used Class 2. Existing Class 2 certificates remained usable until their expiry. For MCA, income tax and GST filings, applicants should now obtain a Class 3 DSC from a licensed Certifying Authority.

What is the difference between a signing DSC and a tender DSC?

A signing-only DSC allows the holder to sign documents and filings electronically. A tender DSC typically combines signing with an encryption key pair, which e-procurement portals use to encrypt bid documents so they can be opened only at the scheduled time. Many government e-tender portals require both functions, so a signing-only certificate may not be accepted for bid submission.

How long is a DSC valid?

A DSC is generally issued for one, two or three years, as chosen by the applicant at the time of purchase, and becomes unusable after expiry. It cannot be extended; a new certificate must be obtained with fresh verification. Holders should track expiry dates, especially ahead of annual filing deadlines, to avoid last-minute delays.

Can someone else use my DSC to file on my behalf?

A DSC identifies the holder, and a filing signed with it is treated as signed by that person under the Information Technology Act, 2000. It should therefore be used only by the holder or with their clear authority and under their control. Sharing the token and password without controls can create legal and compliance risk if the certificate is misused.

What documents are needed to obtain a DSC?

Certifying Authorities generally require identity and address proof, such as PAN and Aadhaar-based or document-based verification, a photograph, and video or in-person verification as per CCA guidelines. Organisation certificates also need proof of the organisation and authorisation of the signatory. Foreign applicants usually need attested or apostilled documents. Exact requirements vary by Certifying Authority and certificate type.