Class 3 DSC — the only class India issues, explained properly
Since 1 January 2021 every new digital signature certificate in India is Class 3, the highest assurance level. What still varies — and what actually decides your price and paperwork — is signing versus encryption, the eKYC route, and the validity you choose. This page walks through each decision honestly, including when you do not need a DSC at all.
Typical reply within minutes during office hours.
Stop researching. Get it done.
You could spend another hour reading — or send us one WhatsApp message and have the exact fee, document list and timeline in writing before dinner.
Over 1,200 applications assisted since 2017. The person who replies is the person who does the work.
What "Class 3" means, and what it signs
India's certificate system historically graded DSCs by how thoroughly the applicant's identity was verified. Class 3 sat at the top: the strictest checks, and therefore the strongest trust in the resulting signature. Today that hierarchy is academic — Class 3 is the only grade on sale — but the assurance behind it is why the certificate is taken seriously.
Legally, a Class 3 DSC is issued under the Information Technology Act, 2000 by a Certifying Authority licensed by the Controller of Certifying Authorities (CCA). A signature made with it does two things a scanned signature image never can: it authenticates the filing as yours, and it provides non-repudiation — you cannot plausibly deny having signed. That combination is why the MCA accepts a director's DSC on an incorporation form, why the income tax portal treats a DSC-signed return as signed, and why a tender portal will bind you to a DSC-signed bid.
The private key that does the signing never sits on your computer. CCA security requirements have it generated and locked inside a FIPS-validated USB token, protected by your PIN — which is what makes the "highest assurance" claim more than marketing.
Why "Class 2" still appears everywhere, and why it does not matter
The CCA directed that issuance of Class 2 DSCs be withdrawn from 1 January 2021. From that date, all new subscribers receive Class 3. Class 2 certificates issued earlier stayed valid until their natural expiry — the last of them are long dead by now — but the paperwork of Indian bureaucracy was never systematically updated.
So you will still meet the ghost in three places: old portal manuals (the GST DSC guide still reads "Class 2 or Class 3"), tender documents recycled from pre-2021 templates, and EPFO and similar instructions written in the old era. In every single case the answer is the same: buy Class 3. It is the higher assurance level; anything that accepted Class 2 accepts Class 3. No portal will reject you for holding the only certificate class that legally exists.
If a vendor tries to sell you a "Class 2 DSC" today, walk away — whatever they are selling, it is not a certificate from a licensed CA. The authoritative list of licensed CAs is maintained at cca.gov.in.
Signing, encryption, or both — the choice that actually matters
Within Class 3, certificates differ by function, and this is the choice that changes your price and your paperwork:
- Signature certificate. Signs documents and filings — authentication plus non-repudiation. This is everything MCA, GST and income tax filing requires. If your DSC life is company filings and tax returns, this is your product.
- Encryption certificate. Does not sign anything; it scrambles data so that only the intended recipient can read it. E-procurement portals use it to keep bids sealed until opening.
- Combo (signature + encryption). Both certificates issued as a pair, living on one token. This is the standard requirement on e-tender portals — you sign your bid with one certificate and the portal encrypts and decrypts bid documents with the other. Buying sign-only and discovering the tender portal wants combo is a classic, avoidable delay.
Licensed CAs sell both individual and organization Class 3 certificates in sign-only and combo form. Rule of thumb: filings need sign-only; tenders need combo. If you are unsure, tell us the portal — the answer takes one message. Tender-specific detail lives on our tender DSC page.
One, two or three years
Class 3 certificates are issued with 1, 2 or 3-year validity — three years being the longest commonly offered. Since every renewal is a full re-issuance (fresh eKYC, fresh video, re-registration on every portal — see renewal), longer validity buys you fewer of those cycles. Two years is the most popular pick among MCA and GST users; three years usually works out cheapest per year; one year fits a single tender or a business winding down. We quote all the validity options together so the comparison is in front of you before you decide.
eKYC routes — how the CA confirms you are you
Issuance is governed by the CCA's Identity Verification Guidelines, which permit several eKYC routes. The ones that matter in practice:
- Aadhaar OTP eKYC — fully paperless; an OTP on your Aadhaar-linked mobile pulls your verified identity. The fastest route, and the basis of our typical 24-hour turnaround for individual DSCs.
- Aadhaar biometric eKYC — fingerprint or iris authentication instead of OTP; useful when the Aadhaar-linked mobile is unavailable. Done at our Vadodara office on a biometric device.
- Offline Aadhaar (paperless XML) — you download your Aadhaar XML with a share code and submit it; no OTP to the CA needed.
- PAN-based eKYC — for personal certificates without Aadhaar: PAN plus supporting documents uploaded and verified electronically.
- Banking and organizational KYC, CA-assisted routes — for applicants verified through bank records, organization-person certificates, and cases such as foreign applicants without Aadhaar or PAN.
Whatever the route, three checks are universal. Mobile OTP and email OTP on your own contact details are mandatory — disposable email addresses are prohibited. And video verification is required for practically every applicant (banking eKYC being the notable exception): a live, interactive video of roughly 20 seconds, your face filling about half the frame, random codes recited on camera. Uploaded recordings are not accepted, and the video must have been taken within the two days before the certificate is issued. It sounds fussy; with us on the phone guiding you, it is a two-minute job. The full rules are in the CCA's guidelines at cca.gov.in, and our explainer DSC video verification covers the common failure points.
What you need, route by route
| Route | You need | Physical paperwork |
|---|---|---|
| Aadhaar OTP (recommended) | Aadhaar number + Aadhaar-linked mobile, PAN details, your own mobile & email, live video | None |
| Aadhaar biometric | Aadhaar number + fingerprint/iris at a biometric device, PAN details, mobile & email, live video | None — visit our office for the biometric capture |
| PAN-based | PAN card copy + one address proof, photo, mobile & email OTPs, live video | Scanned uploads only |
| Organization DSC | All of the above for the signatory, plus organizational proofs and an authorization letter | Scanned org documents — see the organization DSC page |
One warning worth repeating: the name in your certificate should match your PAN records. A mismatch between Aadhaar and PAN names is the most common cause of stuck applications — if your documents disagree with each other, read our guide to name mismatches before applying, or send us both documents and we will check in minutes.
When you do NOT need a Class 3 DSC
Do not buy a DSC you will never use. Government portals increasingly accept OTP-based alternatives, and for many people these are entirely sufficient: individual income tax returns can usually be verified with Aadhaar OTP or net-banking EVC; proprietors and most non-corporate GST taxpayers can file with EVC; many agreements and consents can be executed with Aadhaar eSign. Broadly, a DSC becomes genuinely necessary when you are a company or LLP (GST and MCA signing), a tax-audit case signing income tax forms, a director or professional filing on MCA, or a business dealing with tenders, DGFT or ICEGATE. If your situation is covered by an OTP flow, we will say so and you save the money — the trade-offs are laid out in DSC vs eSign. Where a rule is portal-specific (for instance, exactly which taxpayers must use DSC in a given year), confirm the current requirement on the official portal — incometax.gov.in or gst.gov.in — or ask us to check for your case.
The bottom line
Here is the honest bottom line: you can do this yourself, and this page shows you how. But if you want it done in one clean pass — correct documents, correct drafting, no bounced applications — that is exactly what we sell, at a fixed fee you will see in writing before you commit.
Class 3 DSC — common questions
What does Class 3 mean?
Can I still buy a Class 2 DSC?
A tender document asks for a Class 2 DSC. What do I buy?
Is a Class 3 signature legally valid?
What is the difference between a signing and an encryption certificate?
Do I need the combo certificate for MCA, GST or income tax?
Which eKYC route is fastest?
What documents are needed for the Aadhaar OTP route?
What if my Aadhaar is not linked to my current mobile?
How long is the video verification, and can I upload a recording?
Which validity should I pick for a Class 3 DSC?
Do I always need a DSC to file online?
Not sure which Class 3 certificate fits? Ask before you buy
Tell us on WhatsApp where you need to sign — MCA, GST, a tender portal, DGFT — and we reply with the exact certificate type, validity options and one fixed quote before you pay a rupee.