Digital Signature Certificate (DSC)

Overview

A Digital Signature Certificate (DSC) is the electronic equivalent of a signature that is issued to a person or organisation by a licensed Certifying Authority under the Information Technology Act, 2000. It lets an authorised person sign documents and filings online, and is verified by public key technology. The Controller of Certifying Authorities (CCA) licenses the authorities that issue it.

Zenith guides the applicant through choosing the right certificate, collecting documents and completing the identity verification, so the token or certificate is ready for the filings you need.

Who needs it

• Directors, partners and authorised signatories filing with the MCA, income tax, GST or customs.
• Exporters and importers using the DGFT portal.
• Bidders on e-tendering and e-procurement portals.
• Authorised professionals signing statutory documents.
• Individuals who need a personal signing certificate.

What Zenith does

• Understands the portals you will use and recommends the class and whether you need signing only or signing and encryption.
• Prepares the application, supports identity verification and helps with token or software setup.
• Shares tips on registering the DSC on the relevant portals after it is issued.
• Reminds you before expiry.

Professional fees are customised; the certificate fee from the Certifying Authority is shown separately in the quotation.

Eligibility and key rules

• Individuals, directors, companies, LLPs and organisations can apply; an organisation certificate needs an authorisation for the signatory.
• A valid PAN and Aadhaar-linked mobile and email are typically needed.
• Class 3 is the highest level and is the one most currently used for filings such as MCA, tax, GST, customs and e-tendering. One source says Class 2 has been discontinued, while another still describes it, so Zenith confirms with the Certifying Authority.
• Certificates are issued for one or two years (as stated by the sources read) and must then be renewed.
• Identity is verified by video recording, an in-person check or an Aadhaar-based eKYC.
• The private key sits on a USB token protected by a PIN. It must not be shared.

Documents required

• PAN card.
• Identity and address proof: Aadhaar, passport or voter ID, with recent address proof if needed.
• Passport-size photograph.
• Mobile number and email address linked to the applicant.
• For an organisation: PAN, incorporation certificate, authorisation letter or board resolution, GST certificate where applicable, and the signatory's proofs.
• For foreign nationals: passport and visa documents.

Process and timeline

1. Zenith confirms the class, usage and validity.
2. The application is filled in with the applicant's details.
3. Documents are submitted and the fee is paid.
4. The applicant completes video or eKYC verification.
5. The Certifying Authority verifies and issues the certificate; a token is dispatched or the certificate is downloaded.

Timelines depend on completeness, complexity and authority processing; sources read describe a short verification window of a few working days.

Government fees, penalties and due dates

• Certificate fee: set by the Certifying Authority and varies by class, validity, signing or signing and encryption, and token. Zenith shows the current figure in the quotation.
• Validity: usually one or two years; filings after expiry need a renewed certificate.
• There is no government filing fee for the DSC itself, but misuse of a DSC or sharing the token can have legal consequences under the IT Act.
• Amounts and dates above reflect public sources read in October 2026 and change with notifications, so Zenith confirms the current figures in your quotation.

Common mistakes

• Choosing signing-only when the portal needs encryption as well, or the wrong class.
• Mismatched name between PAN, Aadhaar and the application.
• Using an email or mobile that is not linked to the applicant's Aadhaar.
• Forgetting to register the DSC on the relevant portal after receiving it.
• Letting the DSC expire before a due date.
• Sharing the token PIN with others.

FAQs