A Digital Signature Certificate is required to file almost anything with MCA, DGFT, or government tender portals — but not every DSC is the same. Getting the wrong class or type can mean your filing gets rejected at the last step.
Get a Class 3 DSC for MCA, income tax, and general government portal filings — the most commonly required type.
Get a DSC issued for your DPIIT Startup India recognition application and related filings.
Get a DSC configured for e-tendering portals so you can bid on government and PSU tenders online.
Get a DSC registered with DGFT and ICEGATE for your import-export filings and IEC-related transactions.
A Digital Signature Certificate (DSC) is the electronic equivalent of a signature, used to sign documents and filings online. Its legal basis is the Information Technology Act, 2000, which recognises electronic signatures and sets up the Controller of Certifying Authorities (CCA) to license and supervise Certifying Authorities. Only a licensed Certifying Authority can issue a DSC, after verifying the applicant’s identity as per the CCA’s guidelines.
This section covers the certificates most businesses and individuals use:
A DSC is issued on a cryptographic USB token and is valid for a fixed period, commonly one to three years, after which it must be renewed with fresh verification.
A DSC is personal to the holder. It should be kept securely and used only by the holder or with their express authority, since filings signed with it are attributed to that person.
Validity of one, two or three years can be chosen at the time of application. A longer term reduces renewals but should match the expected need.
No. The Controller of Certifying Authorities discontinued the issue of Class 2 certificates from 1 January 2021, and Class 3 certificates are now issued for purposes that previously used Class 2. Existing Class 2 certificates remained usable until their expiry. For MCA, income tax and GST filings, applicants should now obtain a Class 3 DSC from a licensed Certifying Authority.
A signing-only DSC allows the holder to sign documents and filings electronically. A tender DSC typically combines signing with an encryption key pair, which e-procurement portals use to encrypt bid documents so they can be opened only at the scheduled time. Many government e-tender portals require both functions, so a signing-only certificate may not be accepted for bid submission.
A DSC is generally issued for one, two or three years, as chosen by the applicant at the time of purchase, and becomes unusable after expiry. It cannot be extended; a new certificate must be obtained with fresh verification. Holders should track expiry dates, especially ahead of annual filing deadlines, to avoid last-minute delays.
A DSC identifies the holder, and a filing signed with it is treated as signed by that person under the Information Technology Act, 2000. It should therefore be used only by the holder or with their clear authority and under their control. Sharing the token and password without controls can create legal and compliance risk if the certificate is misused.
Certifying Authorities generally require identity and address proof, such as PAN and Aadhaar-based or document-based verification, a photograph, and video or in-person verification as per CCA guidelines. Organisation certificates also need proof of the organisation and authorisation of the signatory. Foreign applicants usually need attested or apostilled documents. Exact requirements vary by Certifying Authority and certificate type.