Digital Signature Certificate (DSC)

Class 3 DSC for online government filings.

A digital signature certificate is a cryptographic credential issued by a licensed Certifying Authority that gives an electronic signature the same legal effect as a handwritten one under the Information Technology Act. MCA filings need a Class 3 certificate on a hardware token, and it expires on its own cycle — one, two or three years — entirely independently of anything else. An expired DSC blocks every filing that needs it, and the discovery is almost always made on the day of a deadline.

Who this is for

1-2 year validity
MCA filings
e-tender access
1-3 day issuance

The process

What we actually do

1
We get the right class and validity
Class 3 is required for MCA and e-procurement; Class 2 was discontinued and is no longer accepted. A three-year certificate costs less per year and, more usefully, means three years between renewals rather than one.
2
We complete the verification
Issuance requires identity and address verification, typically by video or Aadhaar-based eKYC. For a foreign national the documents must be apostilled, which is what makes a foreign director's DSC take considerably longer.
3
We register it on the portals it will be used on
A DSC is not usable on the MCA portal until it is registered there against the right DIN or PAN. Registering it against the wrong one is a quiet failure that surfaces as a rejected filing.
4
We diarise the expiry
Certificates bought together at incorporation expire together, usually just before an annual filing deadline. Renewal is a fresh issuance with verification, not a click, so it needs a fortnight rather than an afternoon.
5
We replace a lost token
A DSC lives on a hardware token and cannot be recovered from a backup. A lost token means a fresh issuance with fresh verification.

Who this is for

Every director of a company, for MCA filings
Designated partners of an LLP, for Form 8 and Form 11
Authorised signatories filing GST returns for a company or LLP
Anyone filing income tax returns that require a digital signature rather than Aadhaar OTP
Bidders on government e-procurement portals

How long it takes

One to three working days for an Indian applicant with eKYC. A foreign applicant needing apostilled documents should allow two to three weeks.

If you do nothing

Nothing happens until a filing is due, at which point nothing can be filed. Because DSCs are usually bought together at incorporation and expire together, the failure tends to hit the whole board at once — and the renewal takes days that a deadline does not have.

The law, in figures

Dates, thresholds and sections

Every figure below carries the provision it comes from, so it can be checked.
What	Figure	Source
Legal effect	A digital signature is legally equivalent to a handwritten signature	Section 5, Information Technology Act 2000
Issued by	Certifying Authorities licensed by the Controller of Certifying Authorities	Section 24, Information Technology Act 2000
Class required for MCA	Class 3	MCA e-filing requirements
Validity	1, 2 or 3 years depending on the certificate	Certifying Authority terms under the IT Act
Storage	On a FIPS-compliant hardware token; not exportable	CCA guidelines for Class 3 certificates

What usually goes wrong

Discovering the expiry on the day of an annual filing deadline
Registering the DSC against the wrong DIN or PAN on the MCA portal
Buying a Class 2 certificate, which is no longer accepted for MCA filings
Sharing a token between two people, which is a misrepresentation of who signed
Assuming a lost token can be restored from a backup — it cannot

What non-compliance costs

No direct penalty for an expired DSC — the cost is every filing it blocks
Where the block causes an annual filing to be late, the ₹100-a-day fee runs on that filing
Signing with another person's DSC misrepresents the signatory and can invalidate the filing

These are statutory amounts, not our fees. What we charge depends on your situation and is quoted before any work starts.

Not to be confused with

These come up in the same conversation and are routinely treated as the same thing. They are not.

Aadhaar OTP verification

The income tax portal accepts Aadhaar OTP for many returns. The MCA does not — company and LLP filings need a Class 3 DSC on a token, and no OTP substitutes for it.

DIN

A DIN identifies you as a director; a DSC is what you sign with. Both are needed, both can lapse, and they lapse for entirely unrelated reasons.

Terms you will come across

DSC: A DSC is a cryptographic certificate on a USB token that serves as a legally valid electronic signature for filings with the MCA, the income tax portal and the GST portal.

Related services