What Is a Digital Signature Certificate (DSC)? Meaning, Types and Uses in India

A Digital Signature Certificate, or DSC, is the electronic equivalent of your handwritten signature. If you are a company director, a professional filing tax returns, or a business bidding for government tenders in India, you will almost certainly need one. This guide explains what a DSC is, how it works, which type you need and where it is used.

What Is a Digital Signature Certificate?

A DSC is an electronic credential that proves who you are when you sign a document or log in to a government portal online. It is issued by a Certifying Authority (CA) licensed by the Controller of Certifying Authorities (CCA), the regulator set up under the Information Technology Act, 2000. Under that Act, a digital signature made with a valid DSC carries the same legal weight as a handwritten one.

The certificate itself is a small file that carries your name, your public key, the name of the issuing Certifying Authority and the dates between which it is valid. It is usually stored on a secure USB token, and you unlock it with a password each time you sign.

How a digital signature works

A DSC relies on Public Key Infrastructure, which gives you a matched pair of cryptographic keys:

The private key stays on your token and never leaves it. Only you can use it to sign.
The public key sits in your certificate and is visible to anyone who needs to check your signature.

When you sign a document, the private key creates a unique signature tied to the exact contents of that file. Anyone can then check it against your public key. If even one character in the document changes after signing, the check fails. That is how a digital signature proves two things at once: the signer is who they claim to be, and the document has not been altered.

What a DSC is not

A DSC is different from the online Aadhaar-based eSign service. Both create legally valid electronic signatures, but they work differently. A DSC is a certificate you hold on your own token, while eSign is a service that signs a document for you after you authenticate online. Many government portals specifically ask for a DSC, so eSign cannot replace it everywhere.

A digital signature also cannot be used for every kind of document. Certain documents, such as wills and some negotiable instruments and property transfer documents, are excluded by law from being signed digitally, so check before assuming a DSC will do.

Does a DSC stop working when it expires?

An expired certificate cannot be used to sign anything new. But a signature is judged by whether the certificate was valid on the day it was applied. A document you signed while your DSC was valid stays legally valid after the certificate expires.

Types of DSC: Classes, Signing, Encryption and Organisation Certificates

DSCs are described in three ways: by class, by purpose, and by who holds them. Most people only need to make one decision, which is whether they want a signing certificate or a combined one.

Classes of DSC

India has historically had three classes of certificate, based on how strictly the holder's identity is checked:

Class 1 gave basic assurance, checking little more than an email address. It was meant for low-risk use.
Class 2 was used for company filings, income tax returns and GST. The CCA stopped issuing it from 1 January 2021.
Class 3 gives the highest level of identity assurance and requires a full verification of the applicant, either through video or in person.

Today, Class 3 is the certificate issued for business and government filings. If a portal, a tender document or a chartered accountant asks you for a DSC, this is the one they mean. The CCA has also been phasing out the lower classes, so a new applicant should expect to get a Class 3.

Signing, encryption and combined certificates

The purpose of the certificate decides which type you buy:

Signing certificate. Proves who you are and confirms a document has not been altered. This is what most people need for filing returns, forms and tenders.
Encryption certificate. Protects the contents of a document by scrambling it so only the intended recipient can read it. It is needed less often, mainly where confidential documents are exchanged.
Signing and encryption certificate. A combined certificate that does both. It costs more and is usually needed only by organisations that exchange sensitive documents.

If you are unsure, a signing certificate is the usual choice for compliance work.

Individual and organisation certificates

A certificate is issued either in your own name or in your name as a representative of an organisation:

Individual certificate. Carries only your name. Suitable for professionals, directors and anyone signing in a personal capacity.
Organisation certificate. Carries both your name and the name of the company, firm or institution you represent. It needs extra documents proving you are authorised to sign for that organisation, and is often required for filings made on the entity's behalf.

Some portals expect the organisation's name to appear on the certificate. The Directorate General of Foreign Trade portal, used for import-export code work, is one example, so check the portal's requirements before you apply.

Token or paperless

The certificate can be delivered in two ways. A USB token is a physical device that holds your private key and must be plugged into your computer to sign. A paperless or cloud DSC is delivered and managed online without a physical token. The token is the traditional choice, while the paperless version suits people who sign from more than one device. Confirm that the portal you use accepts the format you choose.

Where a DSC Is Used in India

A DSC is legally required, or in practice unavoidable, for a long list of government and business filings. The most common are:

Company and LLP filings on the MCA portal. Incorporating a company or LLP, filing annual returns and other forms with the Registrar of Companies, and appointing or changing directors all need the digital signature of the director or authorised signatory.
GST. Companies and LLPs must sign their GST registration application with a DSC. Businesses that file returns on the GST portal often use it as well, though other verification options exist for some taxpayers.
Income tax. Company returns, tax audit reports and other filings that must be signed by an auditor or authorised signatory use a DSC.
Import and export. The DGFT portal needs a DSC for registering and updating an Import-Export Code, and customs filings on ICEGATE need one too.
Government e-tenders. Bidders on e-procurement portals sign and encrypt their bids using a DSC, and tender documents typically specify the class and type required.
Audit and professional certificates. Chartered accountants, company secretaries and other professionals use a DSC to sign certificates and reports that are filed online.

Who needs one

You will usually need a DSC if you are any of the following:

A director or designated partner signing forms on the MCA portal
An authorised signatory of a company or LLP, for example for a GST registration application
A chartered accountant, company secretary or other professional signing filings on behalf of clients
A business owner or exporter registering for an Import-Export Code
A contractor or supplier bidding on government e-tenders

Not every director of a company needs a DSC, only those who act as authorised signatories for filings. A sole proprietor filing a personal income tax return typically does not need one, since other verification methods are accepted for personal returns.

One DSC, many portals

A single Class 3 certificate can normally be used on several portals, but on some of them you must register it before it will work. Register your DSC on the MCA portal, the GST portal and any other government portal you use, and check that the name on the certificate matches your PAN and other records. A mismatch is a frequent reason for filings to be rejected.

Validity, Security and Common Questions

How long is a DSC valid?

The CCA permits certificates valid for one, two or three years from the date of issue. A longer validity costs more upfront but saves you the effort of renewing, so people who file regularly often choose two or three years. Set a reminder well before expiry, for example 90, 60 and 30 days ahead, so an expired certificate does not block a filing on a deadline day.

Keeping your DSC secure

Your DSC is as good as your signature, so treat the token like a cheque book:

Never share your token or its password with anyone, including staff or agents. If someone else must sign on your behalf, get them their own authorised certificate.
Change the default password the first time you use the token, and do not write it on the token.
Unplug the token when you are not signing.
Keep a note of the issuing Certifying Authority and expiry date.
If the token is lost, stolen or you suspect misuse, contact the issuing Certifying Authority immediately to revoke the certificate.
When an authorised signatory leaves your organisation, revoke their certificate and issue a new one to their replacement.

Common questions

Do I need a DSC for personal income tax returns? Usually not. Individuals can verify returns using other methods, and a DSC is generally needed for company returns and for professionals signing reports.

Can one person hold more than one DSC? Yes. People often hold one in their personal name and another as an authorised signatory of a company.

Is Class 2 still available? No. Issuing of Class 2 stopped from 1 January 2021, and a new applicant is issued a Class 3.

Do I have to visit an office for verification? Not in most cases. Certifying Authorities can verify your identity over a secure video call, though the exact process depends on the provider you choose.

What happens if my name does not match PAN or DIN? The MCA or income tax portal can reject the filing, so make sure your name and details match across your documents before you apply.

Our separate guide on how to get a DSC covers the documents, application steps, cost and renewal in detail.

What Is a Digital Signature Certificate (DSC)? Meaning, Types and Uses in India