Getting a Digital Signature Certificate (DSC) in India is now almost entirely online.

Getting a Digital Signature Certificate (DSC) in India is now almost entirely online. You choose a licensed provider, verify your identity by Aadhaar OTP or a short video call, and receive the certificate on a USB token, often within a day or two. This guide walks through the documents, steps, cost, and renewal so you can apply without delays.

Before You Apply: Choose the Provider and the Certificate

Who can issue a DSC

Only Certifying Authorities (CAs) licensed by the Controller of Certifying Authorities (CCA) under the Information Technology Act can issue a valid DSC. Around twenty CAs hold a licence, and well-known ones include eMudhra, Sify, NSDL, Capricorn and Care4Sign. Many websites and local agents also sell DSCs, but they act as resellers for one of these licensed CAs. Before you pay, check that the CA behind the seller appears on the licensed list on the CCA website.

Which certificate to buy

Decide these four things first, because buying the wrong certificate means paying twice:

Class. Choose Class 3. It is the class issued for MCA, GST, income tax, DGFT and e-tender filings.
Purpose. A signing certificate is enough for most filings. Choose a signing and encryption certificate only if the portal or tender asks for encryption.
Holder. An individual certificate carries only your name. An organisation certificate also carries the name of your company, and some portals, such as DGFT for import-export code work, expect it.
Validity. You can choose one, two or three years.

Ask your chartered accountant, company secretary or the portal's help page if you are unsure. Do not pick a certificate only because it says Class 3, since the right one depends on where you will use it.

Documents you need

For an individual certificate:

PAN card
Aadhaar card, with a mobile number linked to it for OTP verification
A recent passport-size photograph
A working email address and mobile number
Address proof if your address differs from Aadhaar, such as a utility bill. A utility bill used as address proof should be no more than three months old.

For an organisation certificate, you also need:

The PAN of the organisation
A document showing how the organisation is constituted, such as a certificate of incorporation, GST certificate or partnership deed
An authorisation letter or board resolution naming you as the person authorised to hold the certificate
The PAN and Aadhaar of the authorised signatory

Foreign nationals can apply using a passport and address proof from their home country. Check the exact document list with the provider, because it varies slightly between CAs.

Get your details right first

The name on your DSC must match your PAN and the records on the portals where you will use it. Even a small spelling difference between PAN and Aadhaar can cause identity verification to fail, and a mismatched name can lead the MCA or income tax portal to reject a filing. Check the spelling, date of birth and mobile number before you start.

Step by Step: How to Apply for a Class 3 DSC

The exact screens differ between Certifying Authorities, but the journey is the same.

Choose a licensed provider and select the certificate: Class 3, signing or signing plus encryption, individual or organisation, and the validity you want.
Fill in the application. Enter your name as it appears on your PAN, along with your email address, mobile number and organisation details if relevant.
Verify your mobile number and email with the one-time passwords sent to them.
Verify your identity. Most providers offer Aadhaar-based eKYC, where you enter an OTP sent to your Aadhaar-linked mobile or upload your Aadhaar offline file with its share code. Others verify by video, and some combine both.
Complete the video verification if asked. You record or join a short live video, hold your original PAN or Aadhaar card, state your name and read out a code shown on screen. It usually takes a few minutes. You need a working camera and a stable internet connection.
Pay the fee online. Check that the amount covers the token, verification and delivery, so that no charges surprise you later.
Receive your certificate. After verification, the CA issues the certificate and it is loaded onto a secure USB token, which is couriered to you or downloaded through the provider's process. You set your own token password at this point.
Install the token software and test it. Plug in the token, install the driver and signing software that the provider gives you, and check that the certificate shows your correct name and expiry date.
Register the DSC on the portals you use. Some portals, including the MCA and GST portals, need you to register the certificate against your account before you can sign anything. The GST portal, for example, needs the certificate linked to the authorised signatory of the registration.

How long it takes

The online application and verification can take as little as 10 to 15 minutes if your Aadhaar is linked to your mobile number and your documents are ready. The certificate is typically issued within one or two working days after verification, and courier delivery of the token can take a few days more. If you apply without Aadhaar eKYC, expect a slightly longer wait. Do not leave the application to the last day before a filing deadline or a tender closing time.

A note on tokens

A Class 3 certificate is stored on a secure cryptographic USB token, which stops the private key from being copied. In 2026 the CCA has advised a move from FIPS 140-2 tokens to newer FIPS 140-3 tokens. If you are buying a new certificate, ask the provider that the token supplied meets the current requirement. If you are renewing, check whether your existing token can be reused.

Common reasons applications fail or stall

Name mismatch between PAN and Aadhaar, even by one letter
Aadhaar not linked to an active mobile number, so the OTP never arrives
Poor lighting, sound or connection during the video verification
Missing authorisation letter for an organisation certificate
Applying for the wrong type of certificate for the portal

How Much Does a DSC Cost, and How Long Does It Last?

There is no single government fee for a DSC. Each Certifying Authority and its resellers set their own prices, so the total depends on what you choose.

Typical cost

Published prices for a Class 3 certificate vary widely. Providers quote roughly ₹800 to ₹2,500 for a two-year Class 3 signing certificate, and guides that include the token and the combined signing and encryption option put the range higher, at around ₹1,500 to ₹4,500. Treat these as rough guides and check the current price with the provider before you pay, since prices change.

What moves the price:

Validity. A longer validity costs more up front, though a three-year certificate usually works out cheaper per year.
Certificate type. A signing and encryption certificate costs more than a signing-only one.
Holder. Organisation certificates and special ones, such as those for DGFT, can cost more than an individual certificate.
The USB token. A first-time applicant has to buy a token. Someone renewing may be able to reuse a compatible token and skip that cost.
Delivery and service charges. Courier delivery and any assistance fees from a reseller are sometimes added on top.

Compare the total, not the headline price

A very low price can leave out the token, verification or shipping. Before you pay, ask for the complete amount, and confirm that it includes a token that meets the current FIPS 140-3 requirement, the identity verification, and delivery. Buy only from a provider that is, or works with, a CCA-licensed Certifying Authority.

Validity: one, two or three years

The CCA allows certificates valid for one, two or three years, and many providers offer all three. A longer validity means fewer renewals, so people who file regularly often pick two or three years. If you only need a certificate for a single project or filing, one year is enough.

A certificate cannot be extended. When it nears its expiry you renew it, which means obtaining a fresh certificate after going through verification again. Documents you signed while the old certificate was valid stay valid.

About the token

The certificate and the token are separate things. The certificate is your digital identity, and the token is the hardware that stores the private key behind it. Keep the token in a safe place, because losing it means losing the ability to sign until you get the certificate reissued.

Renewing Your DSC

A DSC is not extended when it expires. Renewal means getting a fresh certificate after going through verification again, then loading it onto a compatible token. Start early, ideally a month or more before expiry and sooner if a filing or tender deadline is close, because KYC problems, token issues or a portal that is slow to recognise the new certificate can eat up days.

Renewal steps

Check your expiry date. Open the token software on your computer and view the certificate details.
Check your token. Ask your provider whether your existing token is compatible with the new certificate and the current FIPS 140-3 requirement. If it is, you may not need to buy another.
Confirm the certificate type. Choose the same class and type as before unless your needs have changed.
Apply online and enter your details exactly as they appear on your PAN.
Complete KYC, by Aadhaar eKYC, PAN verification or video, depending on the provider.
Pay and receive the renewed certificate, then download it onto your token.
Register the new certificate on your portals. GST, MCA, income tax, e-tender and DGFT portals may each need the new certificate registered before it works. Do not assume they update automatically.
Test before you need it. Try signing something low-stakes, rather than discovering a problem on deadline day.

If your certificate has already expired, you cannot use it to sign. You will need to obtain a new valid certificate before you can file anything that needs a DSC.

Lost Token, Forgotten Password and Other Problems

Lost or stolen token. Contact the issuing Certifying Authority at once to revoke the certificate so nobody can misuse it, then apply to have it reissued.
Forgotten token password. Entering the wrong password too many times can lock the token and make the certificate unusable. Contact your provider for guidance. You may have to have the certificate reissued, so keep your password somewhere safe.
Token not detected. Check the USB connection, and install or reinstall the token's driver and signing software.
Old certificate still shows up. If your token or computer holds more than one certificate, select the newly issued one when signing.
Portal does not recognise the new certificate. Register or update it on that portal, and allow time for activation.
Filing rejected for name or PAN mismatch. Confirm that the name and PAN on the certificate match the records on the portal.

Quick Checklist Before You Apply

Your PAN and Aadhaar names match exactly
Your Aadhaar is linked to an active mobile number
You know which class and type the portal needs
The provider is a CCA-licensed CA or its authorised reseller
The quoted price includes a compliant token, verification and delivery
You have applied well before your filing or tender deadline