Digital Signature Certificate (DSC): Class 3 for MCA, GST and Tenders in Baran

What Is a Digital Signature Certificate?

A Digital Signature Certificate (DSC) is the electronic equivalent of a signature, issued under the Information Technology Act, 2000. It is a secure digital key, usually stored on a USB token, that proves the identity of the person signing an electronic document and ensures that the document has not been altered after signing. It is issued by a Certifying Authority (CA) that is licensed by the Controller of Certifying Authorities (CCA), after verifying the applicant's identity.

In everyday business terms, a DSC is the key that lets directors, partners, authorised signatories and professionals sign and file documents online. Several government portals will not accept a filing unless it is signed with a valid DSC. The certificate carries the name and other details of the holder, so it should always match the person's PAN or other identity records.

Where Is a DSC Used?

• Ministry of Corporate Affairs (MCA): to sign e-forms such as incorporation, director appointment, annual filings and charge forms, by directors, designated partners and professionals.
• GST portal: for registration and returns, where DSC verification is required, for example, for companies and LLPs.
• Income Tax portal: for certain filings, such as returns of companies and audit reports.
• DGFT and customs: for IEC applications, import-export filings and related services.
• E-tendering and e-procurement: for bidding on government and private tenders.
• Other portals: such as EPFO, trademark e-filing, MSME portals, RERA portals and e-signing of contracts.

Types and Classes of DSC

Certificates differ by their use and by the level of identity verification.

• Class 3: the class that is now used for most government filings and e-tendering. It involves a higher level of identity verification.
• Signing certificate: used to sign documents and forms.
• Encryption certificate: used to encrypt documents, for example, in e-tenders, so that only the intended recipient can read them.
• Combo certificate: for both signing and encryption.
• Individual or organisation: an individual certificate carries the person's name, while an organisation certificate also carries the name of the entity and requires the entity's authorisation.

Classes and rules are set by the CCA and have changed over the years, for example, older classes were discontinued for new issues. We tell you which certificate your portal accepts before you purchase one.

How the Certificate Is Issued

The applicant has to prove identity and, for organisation certificates, the authority to represent the entity. Verification is done through Aadhaar e-KYC with OTP or biometric authentication, or through paper-based documents, or video verification as the Certifying Authority offers. After verification, the CA issues the certificate on a USB token that the applicant keeps. The token is protected by a PIN, and the holder is responsible for its safe use. A DSC has a validity period of one, two or up to three years, depending on the option the applicant chooses, and it has to be renewed before it expires, usually through a similar verification process.

What Our DSC Service Includes

• Recommendation of the class, type and validity that your filings need.
• Checking that the name and details in the application match your PAN and other identity records.
• Guidance on the verification route, whether Aadhaar e-KYC or video verification, for individuals and for organisations.
• Preparation of the application with the required documents, authorisation letters and declarations.
• Coordination with the Certifying Authority for issue and delivery of the USB token.
• Help with installing the token driver and registering the DSC on the portals, such as MCA and GST, where you ask for it.
• Renewal reminders and renewal support before expiry.
• Support for foreign nationals and NRIs, whose applications need additional documents and attestation.

How the Process Works

We start by checking which portals you will use the DSC for and who the signatory is. We then share a checklist and, once we have your documents, prepare the application. You complete the identity verification, for example, an Aadhaar OTP or a video call, using a link we guide you through. The Certifying Authority issues the certificate, and the token is delivered to you or collected as agreed. We help to install the driver and test the certificate, and register it on the portal if you want. The time depends on the Certifying Authority and on how quickly you complete the verification. Foreign national applications take longer.

Using Your DSC Safely

• Keep the token and its PIN with you. Do not hand it over to others, including employees or consultants, without a record of who has it and why.
• Never write the PIN on the token or share it by message.
• If the token is lost or the PIN is compromised, inform the Certifying Authority immediately so that the certificate can be revoked.
• Check the expiry date, and renew before an important filing is due, because an expired certificate cannot sign.
• The person whose name is on the certificate is responsible for documents signed with it.

Important Considerations

• Issue is by the Certifying Authority after verification. We cannot guarantee a certificate or a timeline.
• The name on the DSC should match the name on PAN and other records, otherwise the portal can reject it.
• A DSC alone does not authorise anyone to act for a company. Authority comes from the company's resolutions and the law.
• A DSC registered on one portal may need separate registration or updating on other portals.