Types of Digital Signature Certificate
Digital Signature Certificates are not one size fits all. The Controller of Certifying Authorities (CCA) classifies them by the level of assurance they provide and each class serves a different purpose depending on how sensitive the transaction is.
Class 3 Digital Signature Certificate
This is the certificate most businesses and individuals apply for today. Class 1 and Class 2 certificates were phased out by the CCA a few years back, which makes Class 3 the standard across nearly every use case now, from GST filings to company registrations to court proceedings. It requires strong identity verification, including video verification and comes with higher trust for legal and financial transactions.
Class 3 Digital Signature Certificate further splits based on who’s signing:
- Class 3 – Individual — issued to a single person, used for income tax filing, GST returns, trademark applications and personal legal documents
- Class 3 – Organization — issued in the name of a company or entity, used for corporate filings, tenders and business contracts
- Class 3 – Combo (Signing + Encryption) — bundles two certificates on one token, one for signing documents and one for encrypting sensitive data, commonly used in tender submissions where both are required
DGFT Digital Signature Certificate
A specialized certificate meant specifically for the Directorate General of Foreign Trade portal. Exporters and importers use this to file applications, licenses and other trade documents online. It’s functionally similar to a Class 3 certificate but restricted to DGFT-related use.
Document Signer Certificate
Used by organizations that need to digitally sign a large volume of documents automatically, like banks issuing statements or insurance companies issuing policies. This one isn’t tied to an individual; it’s installed on a server and applies signatures at scale without manual intervention each time.
How to Apply for a Digital Signature Certificate
A token based Digital Signature Certificate is the traditional way but still preferred for government tenders, GST filings, company registrations and court e-filing. It comes stored on a physical USB token and the application process runs through a Certifying Authority licensed by the Controller of Certifying Authorities (CCA) under the IT Act 2000.
The process follows a fixed sequence. Here’s how it typically goes:
- Choose a Certifying Authority — Providers like eMudhra, Sify, Capricorn or NSDL are licensed to issue DSCs in India
- Select the certificate class and validity — Class 3 is standard for most business use; validity is usually 1, 2, or 3 years
- Fill out the application form — Available on the CA’s website, requiring basic identity and contact details
- Submit documents for verification — PAN card, Aadhaar card, a passport-size photo and address proof if not linked to Aadhaar
- Complete video verification — A short call where the applicant confirms identity on camera, sometimes replacing the older notarized paper route
- Make payment — Fees vary by CA and certificate validity period
- Receive the USB token — Once approved, the DSC gets loaded onto a token, either couriered physically or activated through a downloadable driver if using a virtual token service
For organizational certificates, there’s an extra step: an authorization letter from the company, along with the organization’s PAN and incorporation documents, since the certificate needs to bind both the individual’s identity and their authority to sign on the company’s behalf.
Documents Required for Digital Signature Certificate Application
The exact list varies slightly by Certifying Authority but most applications fall into two categories: individual applicants and organizational applicants.
For Individual Applicants
- PAN card (mandatory, serves as primary identity proof)
- Aadhaar card, linked to an active mobile number for OTP or video verification
- Passport-size photograph, recent and clear
- Address proof, needed only if the address on Aadhaar is outdated or unavailable — utility bill, passport, or bank statement usually works
For Organizational Applicants
Business owners, company directors, or authorized signatories need everything above, plus:
- Organization’s PAN card
- Certificate of Incorporation or business registration proof (GST certificate, partnership deed, or LLP agreement, depending on entity type)
- Authorization letter from the organization, confirming the applicant is permitted to sign digitally on the company’s behalf
- Board resolution, in some cases, particularly for larger companies applying for a DSC tied to a specific director or officer
For Foreign Nationals or NRIs
- Passport copy (mandatory, replaces PAN in most cases)
- Visa copy, if applying from within India
- Address proof from country of residence, sometimes notarized or apostilled depending on the CA’s requirements
USB Token DSC vs Cloud DSC
Two signing methods dominate the market and they solve different problems.
A USB token DSC stores the private key on a physical hardware device, an encrypted crypto token that plugs into a computer’s USB port. Nothing about the signature works without that token physically present, which makes it hard to misuse remotely but inconvenient if it’s lost, forgotten at home, or incompatible with a particular device.
A cloud-based DSC, sometimes called an HSM-based or server-based signature, stores the private key on a secure remote server instead. Signing happens through OTP or biometric authentication, no token, no driver installation, no compatibility headaches across laptops or operating systems.
Neither is universally “better.” Government tender portals and court e-filing systems still often require the token-based route because of how deeply that format is embedded in older systems. For day-to-day business signing, contracts, HR documents, vendor agreements, cloud-based signing tends to win on speed and convenience.
Digital Signature Certificate Price / Cost in India (2026)
Pricing of Digital Signature Certificate depends on three things: one is, the Certifying Authority issuing it, second is the validity period chosen and whether a USB token is bundled in. Providers typically price a one-year Class 3 certificate starting around ₹826 with two-year certificates closer to ₹992, though rates climb depending on the vendor and any bundled services.
Note: Video KYC has been mandatory for all new DSC applications since April 2021, per CCA and MeitY requirements, so that cost isn’t optional no matter which provider gets chosen. GST at 18% typically applies on top of the base certificate price and organizational DSCs usually cost more than individual ones because of the extra document verification involved.
DSC Validity & Renewal Process
A Digital Signature Certificate isn’t permanent. The CCA mandates fixed validity windows and once a certificate expires, it stops working entirely until renewed.
Validity options run for 1, 2, or 3 years, chosen at the time of application. Longer validity costs more upfront but avoids the hassle of repeating KYC and document verification every twelve months.
Renewal follows almost the same steps as a fresh application:
- Submit the renewal request through the same Certifying Authority (or a new one, if switching)
- Complete identity verification again, usually video KYC
- Pay the renewal fee, which varies based on the new validity period chosen
- Receive the renewed certificate, either reloaded onto the existing token or issued fresh
It’s worth starting the renewal process at least a week or two before expiry. Once a DSC lapses, any filing that depended on it, GST returns, MCA submissions, tender bids, simply cannot go through until a valid certificate is back in place. There’s no grace period built into most government portals.
Uses of Digital Signature Certificate in India
Digital Signature Certificate shows up across nearly every regulatory and compliance touchpoint in Indian business:
- GST Filing — Required for filing GST returns, especially for companies and LLPs, where digital signing is mandatory rather than optional
- Income Tax Filing — Used to sign income tax returns electronically, particularly for taxpayers whose accounts require a statutory audit
- MCA Company Registration — Every director involved in incorporating a company or LLP needs a DSC to sign forms filed with the Ministry of Corporate Affairs
- e-Tendering — Government tenders and procurement portals require a Class 3 DSC to submit bids securely, often the Combo type covering both signing and encryption
- Import Export (DGFT) — Exporters and importers use a DGFT specific DSC to file applications and licenses through the Directorate General of Foreign Trade portal
Beyond these, DSCs also apply to trademark filings, court e-filing, ROC compliance and signing encrypted business emails.
DSC for Company Registration / LLP
Company and LLP registration in India runs entirely through the MCA’s online portal and that process cannot move forward without a DSC. Every proposed director or designated partner needs one before the incorporation form (SPICe+ for companies, FiLLiP for LLPs) can be filed.
For startups, this often becomes the first compliance step even before the business technically exists on paper. Founders sometimes underestimate the lead time, assuming registration can happen the same day, when in reality getting DSCs issued for two or three directors, each requiring individual KYC, can take a day or two if done through the traditional token route.
This is also where the cost difference matters for early-stage businesses. A single incorporation might need 2-4 DSCs at once, one per director, which adds up quickly if going through a Certifying Authority charging on the higher end of the price range.
Major DSC Providers in India
Several Certifying Authorities are licensed by the CCA to issue DSCs and the differences between them tend to come down to processing speed, support quality and pricing rather than certificate validity itself, since all of them meet the same legal standard.
There isn’t a single “best” provider across the board. eMudhra tends to have the widest reach and support infrastructure, which matters for businesses juggling multiple certificate types (Combo, DGFT, individual, organizational) at once. Capricorn and VSign often come in cheaper for straightforward individual Class 3 certificates. For most SMEs, the deciding factor ends up being which Certifying Authority a trusted local Registration Authority partners with, since RA quality affects turnaround time more than the CA brand itself.
Foreign DSC for NRIs
NRIs and foreign nationals doing business in India, whether that’s company directorship, property transactions, or tax filing, can apply for a DSC too, though the documentation looks a little different.
Eligibility
Any foreign national or NRI involved in an Indian company, LLP, or property transaction requiring a digital signature can apply, provided they can furnish valid identity and address proof from their country of residence.
Process
The application follows the same core steps as a domestic DSC, Certifying Authority selection, document submission, video verification, but documents often need apostille or notarization depending on the country of origin. Passport replaces PAN as the primary identity document in most cases and processing tends to take slightly longer due to the extra verification layer.
Use Cases
Common scenarios include NRI directors signing MCA filings for an Indian subsidiary, foreign nationals executing property or legal documents remotely and overseas business owners handling GST or tax compliance for an Indian branch without needing to travel back for each filing.
