DSC for your digital identity, issued right.
India's only currently-issued digital signature — Class 3 DSC under Information Technology Act 2000, Section 5. Legally equivalent to handwritten signatures. Issued by CCA-licensed Certifying Authorities (eMudhra, Sify, NSDL, Capricorn) via mandatory video KYC (CCA V2.5, Feb 2026). Same-day issuance if applied before 3 PM. Three variants: Signing DSC (MCA + GST + IT + EPFO — the workhorse), Encryption DSC (rare standalone), Combo DSC (mandatory for e-tenders + GeM). Class 1 and Class 2 fully extinct since 2021. From September 21, 2026, all new tokens must be FIPS 140-3 certified. Cloud DSC now widely accepted on MCA V3, GST, DGFT — no physical token needed. We handle name-match verification, video KYC coordination, token delivery, portal installation, and renewal tracking.
- Class 3 Signing DSC (MCA / GST / IT / EPFO ready)
- Video KYC completion (mandatory 2026)
- FIPS 140-3 certified USB token (compliant Sep 2026)
- 2-year validity (1yr / 3yr also available)
- Enrollment via licensed CA (eMudhra / Sify / NSDL)
- DSC installation + testing on MCA V3 + GST portal
What DSC is and which class exists in 2026
In one line: Class 3 is the only DSC issued today (Class 1 and 2 extinct since 2021), governed by IT Act 2000, issued via video KYC by CCA-licensed CAs.
A Digital Signature Certificate (DSC) is the digital equivalent of a handwritten signature, issued under the Information Technology Act, 2000. It cryptographically binds your identity to a public key using Public Key Infrastructure (PKI).
Regulator + Issuers:
- Regulator: Controller of Certifying Authorities (CCA), Ministry of Electronics & IT
- Licensed CAs: eMudhra, Sify, NSDL, Capricorn, Prodigi, Verasys, IDSign
Class 3 sub-variants (all Class 3 since 2021):
- Signing DSC — MCA V3, GST, Income Tax, EPFO (workhorse, 90% of users)
- Encryption DSC — receive encrypted documents (rare standalone)
- Combo DSC — Signing + Encryption (mandatory for e-tenders + GeM)
Key 2026 developments:
- CCA Identity Verification Guidelines V2.5 (Feb 2026) — video KYC mandatory
- FIPS 140-3 tokens mandatory for new tokens from Sep 21, 2026
- Cloud DSC widely accepted on MCA V3, GST, DGFT (no physical token)
- Aadhaar e-Sign expanding for low-risk filings (but DSC still needed for corporate work)
Choose DSC if you...
- You need to incorporate a company or LLP on MCA V3 portal — every director/designated partner needs Class 3 DSC before SPICe+ filing
- You file GST returns, refunds, or applications where Aadhaar authentication isn't used (mandatory for OIDAR + composition + certain refunds)
- You file income tax returns for companies, LLPs, trusts, and audit reports — Section 44AB, transfer pricing, tax audit reports all need DSC
- You participate in e-tenders, GeM portal, or government procurement — Class 3 Combo DSC (Signing + Encryption) required
- You handle DGFT filings, ICEGATE customs, EPFO returns, or TRACES filings — DSC is mandatory or fastest
- You want legally binding electronic contracts — Section 5 of IT Act 2000 makes DSC-signed documents equivalent to handwritten signatures
Skip DSC if you...
- Your only e-filing need is individual income tax return and you can complete Aadhaar OTP-based e-verification instead
- You're signing only low-risk internal documents that don't need CCA-issued certificates — Aadhaar e-Sign is now widely accepted
- You're a salaried employee not filing on behalf of any company — your employer's TDS + Form 16 handles most requirements
- You have only 3-6 months of use planned — the token investment isn't worth it; consider cloud DSC or Aadhaar e-Sign
What Class 3 DSC actually delivers
Every benefit anchored to IT Act section, CCA regulation, or specific portal requirement — digital identity done properly.
IT Act 2000 · Legal Equivalent of Signature
Under Section 5 of the Information Technology Act, 2000, a document signed with a valid Digital Signature Certificate is legally equivalent to a handwritten signature. Documents signed via DSC are tamper-proof, non-repudiable, and admissible as evidence in Indian courts. If a DSC was valid at the time of signing, the signature remains legally binding even after the certificate expires — protecting the long-term enforceability of digital contracts, regulatory filings, and government submissions.
MCA V3 Portal · Foundation for Incorporation
Every director of a Pvt Ltd, designated partner of an LLP, and shareholder of an OPC needs a valid Class 3 DSC before the SPICe+ form can be filed on MCA V3 portal. Without DSC, incorporation simply cannot begin. Post-incorporation, DSC is mandatory for annual filings (Form MGT-7, AOC-4), director KYC (DIR-3 KYC), e-form filing (SH-7, PAS-3, MGT-14), and every subsequent MCA compliance. The founding document of India's corporate ecosystem.
GST + Income Tax · Multi-Portal Ready
Under the CGST Act 2017, DSC is required for GST registrations, returns, and refund applications where Aadhaar authentication isn't used. Under the Income Tax Act 1961, DSC is mandatory for company + LLP + trust ITR filings, audit reports (Form 3CA/3CB/3CD), transfer pricing reports (Form 3CEB), and Section 44AB reports. One Class 3 Signing DSC serves the entire tax + regulatory stack — no separate certificates for each portal.
CCA Regulated · Public Key Infrastructure
DSCs are issued by Certifying Authorities (CAs) licensed by the Controller of Certifying Authorities (CCA), Ministry of Electronics and Information Technology. Active licensed CAs: eMudhra, Sify, NSDL, Capricorn, Prodigi, Verasys, IDSign. Every certificate is issued under India's PKI (Public Key Infrastructure) framework, cryptographically binding the holder's identity to a public key. This creates an unbroken chain of trust from root CA down to individual signer — the gold standard for enterprise identity assurance.
Video KYC · Same-Day Issue
Since 2026, video KYC has replaced in-person verification for most DSC applicants under CCA Identity Verification Guidelines Version 2.5. Applicants complete a 5-minute video call with the CA — showing PAN + Aadhaar, capturing a photo, and answering standard verification questions. Typical timeline: same-day issue if applied before 3 PM; otherwise next working day. Enables remote onboarding for distributed teams + foreign directors.
e-Tenders + GeM · Government Procurement Ready
For companies bidding on government contracts, a Class 3 Combo DSC (Signing + Encryption) is mandatory. This includes Central Public Procurement Portal (CPPP), GeM (Government e-Marketplace), Indian Railways IREPS, Defence tenders, and every state e-tender portal. Combo DSC lets you both sign bid documents and encrypt sensitive commercial terms so only the tender authority can read them. Zero DSC = zero government business.
Coming soon: the full DSC application + installation flow
From video KYC to MCA V3 test signature — the whole journey in 2 minutes.
3-stage DSC lifecycle · Application to renewal
Teal = application (hours). Gold = delivery + install (days 2-5). Green = 2-year use + renewal cycle.
WhatsApp us your basics
PAN, Aadhaar name, intended use case (MCA/GST/tender), validity choice (2yr common), quantity (single or bulk). Free name-match verification against PAN + fee estimate within business hours.
Online form + document upload
Application form filled with exact PAN-matched name. Upload PAN, Aadhaar (Indian nationals) or apostilled passport (foreign), photograph, and organisation docs if applicable. Payment made online.
5-minute liveness call
Video call with CA representative — show original PAN + Aadhaar, capture live selfie, read random OTP aloud, verbally confirm application details. CCA V2.5 (Feb 2026) requires this for most applicants.
Certificate issued
If applied before 3 PM, DSC issued same day. Certificate file (.p12/.pfx) emailed. For cloud DSC, activation instant. For physical DSC, USB token shipped by courier — 2-5 day delivery.
Token + driver setup
Install token driver (Windows/Mac). Import certificate into token via CA-provided utility. Set strong password (never share, CA can't reset). Test on MCA V3 or GST portal with a blank test signature.
Fresh video KYC · new certificate
DSC renewal is same as fresh issue — new video KYC, new certificate. USB token can be re-used (just import new certificate). Signature validity outlasts certificate expiry — old signed documents remain binding forever.
Eligibility — 6 checkpoints
Documents you'll need
Minimal set — mostly PAN + Aadhaar + photo. Name spelling on application must match PAN exactly (#1 rejection cause).
Identity + Address
- PAN card (must match name spelling exactly)
- Aadhaar card (Indian nationals — mandatory)
- Passport (foreign nationals — apostilled)
- Passport-size photo (recent, JPEG, colour, plain background)
- Mobile number linked to Aadhaar (for OTP)
- Email ID (for CA communication + certificate download)
Organisation DSC (extra)
- Certificate of Incorporation / LLP Agreement
- PAN of the entity
- Board resolution authorising the DSC holder
- Authorisation letter on company letterhead
- GSTIN certificate (if applicable)
- Bank statement (proof of active organisation)
Compliance + KYC
- Video KYC completion (mandatory 2026)
- FIPS 140-3 compliant USB token (or cloud DSC)
- DSC application form (auto-generated by CA)
- Payment receipt (professional + CA fee)
- Backup email + phone (for OTP recovery)
- For foreign nationals: apostilled documents + Hague Convention compliance
Pick your use case · Get exact DSC + total cost
Tell us your primary use case, quantity, validity, and token preference. Get the right Class 3 variant and total setup cost in real time.
Class 3 DSC variants · Signing vs Encryption vs Combo
Signing DSC covers 90% of needs. Combo is essential for government tenders. Encryption alone is rarely needed standalone.
| Criteria | Signing (Most Common) | Encryption | Combo (Sign + Encrypt) |
|---|---|---|---|
| Primary use case | MCA, GST, IT, EPFO, TRACES filings | Receiving encrypted documents | e-Tenders, GeM, e-procurement |
| Signs documents? | ✓ Yes | ✗ No | ✓ Yes |
| Encrypts documents? | ✗ No | ✓ Yes | ✓ Yes |
| MCA V3 SPICe+ filing | ✓ Works | ✗ Not accepted | ✓ Works |
| GST returns + refunds | ✓ Works | ✗ Not accepted | ✓ Works |
| e-Tender participation | Only if tender-specific | Partial | ✓ Mandatory |
| GeM portal | Some categories | ✗ Not sufficient | ✓ Required |
| Validity options | 1 / 2 / 3 years | 1 / 2 / 3 years | 1 / 2 / 3 years |
| Token requirement | FIPS 140-3 (from Sep 2026) | FIPS 140-3 required | FIPS 140-3 required |
| Cloud DSC available | ✓ Yes · MCA V3 + GST accepted | Limited | Not for e-tenders yet |
| Our professional fee | ₹2,500 (2yr Signing) | ₹1,999 (2yr Encryption) | ₹3,500 (2yr Combo) |
| CA fee (pass-through) | ₹800-1,200 (2yr) | ₹1,000-1,500 (2yr) | ₹1,500-2,500 (2yr) |
Portal coverage map · Signing vs Combo vs e-Sign
The definitive matrix — 8 major government portals × 3 signing options. Simple rule: Class 3 Signing covers 90% of needs. Combo only for e-tenders + GeM.
From certificate to first signed document
3 immediate milestones (issue, delivery, installation), 1 recurring (renewal every 2 years).
Video KYC + document verification
You submit PAN + Aadhaar + photo online. Complete a 5-minute video KYC call with the Certifying Authority — show original documents, read out a random OTP, confirm details. CCA Identity Verification Guidelines V2.5 (Feb 2026) require live liveness detection.
Apply before 3 PM for same-day issueCertificate issued + downloaded
DSC file (.p12 or .pfx format) emailed / downloaded from CA portal. USB token (if physical) shipped to your address in 2-5 days. For Cloud DSC, activation instant on mobile app. Certificate details include name, PAN, DoB, validity period, CA signature.
Store DSC password securely — CA cannot reset itUSB token delivery + installation
Physical FIPS 140-3 token (ePass 2003 / Trust Key / mToken / Aladdin / WD Proxkey) delivered by courier. Install token driver on your computer (Windows / Mac). Import DSC into token via CA-provided utility. Test signature on MCA V3 + GST portal — one blank test to confirm working.
Keep token driver ISO safe · reinstall needed after Windows updateRenewal cycle
DSC expires per selected validity (typically 2 years). Renewal is same process — video KYC + document re-verification + fresh certificate. Signature validity outlasts certificate expiry: any document signed while DSC was valid remains legally binding forever. Start renewal 30 days before expiry to avoid gap.
Auto-renewal reminders in TP compliance retainer6 common DSC mistakes — and how to avoid them
#1 mistake: name mismatch between PAN and DSC application (30% of rejections). Costliest: buying extinct Class 2 or non-FIPS 140-3 tokens post-Sep 2026.
Name mismatch between PAN and DSC application
The #1 reason for DSC rejection. If your PAN card has "Rajesh Kumar Sharma" but you fill "Rajesh K Sharma" in DSC application, the CA rejects at video KYC or auto-verification. Similarly, initials vs full name, order of first/middle/surname, and hyphenation all cause rejection. Under CCA V2.5 guidelines (Feb 2026), verification is exact-match-only.
Buying Class 2 DSC or Class 1 DSC (extinct)
Class 1 and Class 2 DSCs have been fully phased out since 2021. All Class 2 certificates have already expired. Some fraudulent resellers still market "Class 2 DSC" to unaware buyers — these are either fake or Class 3 mislabelled. MCA, GST, and every other portal accept only Class 3. Money spent on non-Class-3 = wasted.
Buying non-FIPS 140-3 USB token after Sep 21, 2026
From September 21, 2026, all new DSC USB tokens must be FIPS 140-3 certified (upgrade from FIPS 140-2). Legacy tokens continue to work until their validity expires. But new purchases of FIPS 140-2 tokens are non-compliant — they won't work with fresh DSC issuance post-Sep 2026. Some low-cost resellers still ship FIPS 140-2 stock without disclosing this.
Sharing DSC password or storing insecurely
DSC password is known only to the certificate holder — CA cannot reset it. Common mistakes: writing password on the token, storing in unencrypted text file, sharing with junior HR staff for "just this filing," or using birthday-based passwords. Every DSC-signed document is legally attributable to the certificate holder — Section 5, IT Act 2000. A shared password becomes a personal legal liability.
Missing renewal deadline · Filing gap
DSC expiry means immediate loss of ability to file on MCA / GST / IT portals. If your DSC expires Nov 15 and you have a Nov 30 GST return due, you can't file. Reissue takes 1-2 days, but there's no back-dating — late-filing penalties still apply. Companies with multiple director DSCs face compounding risk: 4 directors × 2-year validity = potential monthly renewal cycles if not tracked.
Using Individual DSC for company filings (or vice versa)
Individual DSC is issued in your personal name only. Organisation DSC includes both your name + the organisation name. MCA director filings, GST authorised signatory declarations, and IT audit reports on behalf of a company all require Organisation DSC — Individual DSC gets rejected. Conversely, personal ITR filings work with either but Organisation DSC is overkill (higher cost).
Pick your engagement
Personal filings only? Company MCA/GST/IT? Multi-director + renewal tracking? Match tier to use case.
- Class 3 Signing DSC (2-year validity)
- Individual name only (not org)
- Video KYC same-day (before 3 PM)
- FIPS 140-3 USB token included
- Installation + MCA/GST test
- Renewal reminder at 30 days
- 90-day support for setup issues
- Not valid for MCA director / GST authorised signatory
- Class 3 Signing DSC (2-year validity)
- Includes name + organisation
- Board resolution + auth letter drafted
- Works on MCA V3 / GST / IT / EPFO / TRACES
- Video KYC same-day (before 3 PM)
- FIPS 140-3 USB token included
- Cloud DSC option (no physical token)
- Priority WhatsApp support
- +₹500 for 3rd year validity · +₹1,000 for Combo (e-tender)
- Everything in Organisation tier
- Up to 4 DSCs per company (directors + auth signatory)
- Combo DSC included for e-tender bidding
- Automated renewal tracking (45/30/7 day alerts)
- DSC health monitoring (revocation checks)
- MCA + GST + IT installation verified quarterly
- Password recovery + reissue coordination
- Foreign national director support (apostille)
- Renewal reminders before expiry
- Scale-pricing: +₹1,999/yr per additional DSC beyond 4
Prefer a call back?
Leave your number and a good time — we call within business hours (Mon–Sat, 10 am–7 pm) about Digital Signature Certificate (DSC).
DSC issuance
The Tax Paramarsh desk
"DSC feels like a simple utility until you've watched a promising incorporation get delayed by a week because the fourth director's DSC application was rejected twice for a name mismatch — his PAN has "Rajesh Kumar" but he wrote "Rajesh K." on the application. The CCA Identity Verification Guidelines Version 2.5 released in February 2026 tightened this — verification is now exact-match only, no fuzzy tolerance. The other 2026 shift is the FIPS 140-3 token mandate kicking in September 21. Every token we've shipped since April is FIPS 140-3 certified against the approved brand list — ePass 2003, Trust Key, mToken, Aladdin, WD Proxkey — so our clients aren't caught by the transition. For distributed teams and foreign directors, cloud DSC is now the default we recommend. MCA V3, GST, DGFT all accept it, and there's no shipping delay, no Windows compatibility drama. The only holdout is e-tender portals, where physical token is still the safe choice through 2026. The last thing worth calling out — we pre-verify spelling across PAN and Aadhaar before touching the CA portal. That single quality gate has saved clients an average of 3-4 days per DSC."
What businesses say after DSC with us
Common questions
Straight answers. Still curious? WhatsApp us anything.
What is a Digital Signature Certificate?
A Digital Signature Certificate (DSC) is an electronic document that serves as the digital equivalent of a handwritten signature or physical stamp. It is issued by a Certifying Authority (CA) licensed by the Controller of Certifying Authorities (CCA), under the Information Technology Act, 2000.
How it works: A DSC cryptographically binds the identity of the certificate holder to a public key using Public Key Infrastructure (PKI). When you sign a document digitally using your DSC, it creates a unique, encrypted signature that cannot be replicated, forged, or altered after signing.
Legal status: Under Section 5 of IT Act 2000, documents signed with a valid DSC have the same legal standing as handwritten-signed documents. Indian courts and government authorities accept digitally signed documents as legally valid proof, including in litigation.
Which class of DSC do I need in 2026?
Only Class 3 DSC is available for issuance in India as of 2026. Class 1 and Class 2 DSCs have been fully phased out.
Historical context:
- Class 1 DSC — basic email verification only, used for personal email security. No longer issued since 2021.
- Class 2 DSC — identity verified against trusted databases (ROC, IT). Widely used for ROC filings, GST, ITR. CCA merged Class 2 into Class 3 in 2021. All Class 2 DSCs have since expired.
- Class 3 DSC — highest identity assurance, rigorous verification. Sole active class since 2021.
Anyone marketing "Class 2 DSC" today is either misrepresenting or fraudulent. Only buy Class 3 from CCA-licensed CAs (eMudhra, Sify, NSDL, Capricorn, Prodigi).
What are Class 3 DSC sub-variants?
Class 3 has three sub-variants based on function:
- Signing DSC (most common) — signs documents. Used for MCA V3, GST, IT, EPFO, TRACES filings. This is the workhorse most professionals need.
- Encryption DSC — encrypts documents so only intended recipient can decrypt. Rare standalone use. Sometimes required for receiving sensitive government correspondence.
- Combo DSC (Signing + Encryption) — both functions in one certificate. Mandatory for e-tenders, GeM portal, e-procurement, IREPS, Defence tenders. Class 3 Combo lets you both sign bid documents and encrypt commercial terms.
Recommendation: Most tax + MCA users need only Signing DSC. Government contractors bidding on tenders need Combo DSC.
Is video KYC really mandatory in 2026?
Yes — video KYC is mandatory for most DSC applications from 2026, under CCA Identity Verification Guidelines Version 2.5 (February 2026).
How video KYC works:
- You schedule a 5-minute video call with the Certifying Authority
- Show original PAN + Aadhaar to camera (or passport for foreign nationals)
- Take a live selfie / photo capture
- Read out a random OTP for liveness verification
- Confirm application details verbally
Why the change: Replaces older in-person + attester-based verification. Enables remote onboarding for distributed teams, foreign directors, and rural India. Same-day DSC issuance now possible if applied before 3 PM.
Exceptions: Bulk enrollments for large organisations may still use in-person supervised sessions. Some very-low-risk categories (basic e-Sign) don't require video KYC.
What does a DSC actually cost in 2026?
Two components: Certifying Authority (CA) fee + Professional service fee.
CA fee (varies by CA + validity):
- Class 3 Signing DSC (1yr): ₹500-800
- Class 3 Signing DSC (2yr): ₹800-1,200
- Class 3 Signing DSC (3yr): ₹1,200-1,800
- Class 3 Combo DSC (2yr): ₹1,500-2,500
USB token cost: ₹300-800 for FIPS 140-3 certified token (ePass 2003, Trust Key, mToken, WD Proxkey). Cloud DSC has no token cost.
Our professional fee:
- Individual DSC (2yr): ₹2,500 — for personal filings only
- Organisation DSC (2yr): ₹3,500 — for MCA/GST/IT company filings
- DSC Compliance Pack (annual): ₹6,000/year — up to 4 DSCs + renewal tracking + support
Plus GST @ 18% on our fees. Total for Organisation Signing DSC: approximately ₹4,500 all-in (2-year usage).
Cloud DSC vs USB token — which is cheaper?
Cloud DSC is typically ₹300-500 cheaper (no token cost) but similar in CA fees.
Cloud DSC advantages:
- No physical token shipping (instant activation)
- Works from any device (mobile app + browser)
- No token driver installation / Windows compatibility issues
- No risk of losing token
- Ideal for distributed teams + foreign travel
Cloud DSC limitations:
- Not accepted on all e-tender portals (yet)
- Requires stable internet at signing time
- Mobile-first — some enterprise workflows still expect physical token
- Some very-large-value transactions still prefer physical token for auditability
Bottom line: For MCA, GST, IT filings — cloud DSC works excellently. For e-tenders + GeM — physical USB token still safer choice in 2026.
Are cheap DSCs (₹500-800 total) legitimate?
Sometimes yes, but check carefully. Legitimate low-cost DSCs exist when:
- Buying directly from CA portal (skipping resellers)
- 1-year validity only (shorter certificate = lower cost)
- Individual DSC (not Organisation)
- Cloud DSC (no token cost)
- Class 3 Signing only (not Combo)
Red flags for fraudulent low-cost DSCs:
- "Class 2 DSC" marketing (extinct since 2021)
- No CCA-license number shown on invoice
- Doesn't appear in CA's official portal after issue
- Certificate chain doesn't verify to CCA root
- No video KYC step (post-2026, this is mandatory)
Our recommendation: Verify every DSC at CCA portal after issuance. Save ₹200-500 chasing cheapest option is not worth risk of rejection at MCA/GST/tender time.
Is DSC cost tax deductible?
Yes — DSC costs are fully deductible business expenses under Section 37(1) of the Income Tax Act, 1961 when used for business purposes.
Categorisation:
- Individual DSC used for personal ITR: Not deductible (personal expense)
- Organisation DSC used for company/LLP filings: Fully deductible as regulatory compliance cost
- DSC for e-tenders + business procurement: Fully deductible as business development cost
- Renewal fees, token replacement, cloud DSC subscription: Fully deductible
GST input credit: If your entity is GST-registered and you receive a proper tax invoice, GST paid on DSC service fees is available as ITC for business use. Not available for personal-use Individual DSC.
How fast can I get a DSC?
Fastest realistic timeline: same day if applied before 3 PM. Full breakdown:
- Cloud DSC: 2-4 hours after video KYC — no physical shipping
- Physical DSC with USB token: Certificate ready same day; token delivered by courier in 2-5 days
- Foreign national: 3-7 days (extra time for apostille verification)
- Bulk enrollment (10+ DSCs): 3-5 working days (individual video KYCs scheduled)
What speeds it up: Correct name spelling matching PAN, active Aadhaar-linked mobile, applying before 3 PM, choosing cloud DSC. What slows it down: name mismatches (30% rejection cause), unclear document photos, video KYC scheduling conflicts.
Our target: Cloud DSC Organisation issued in same-day, USB token DSC in 3 working days end-to-end.
When does DSC expire and how do I renew?
DSC expires per the validity chosen at issue — 1, 2, or 3 years. Most common: 2-year validity.
Renewal process:
- Start 30-45 days before expiry (avoid last-minute rush)
- Full video KYC + document verification (same as fresh issue)
- New certificate issued — old certificate expires normally on its date
- USB token can be re-used (just new certificate imported) — saves ₹300-800
Critical point: Documents signed while old DSC was valid remain legally binding forever — CCA principle. So a contract signed on Dec 1 with a DSC that expires Dec 31 remains enforceable even in 2030.
Auto-renewal: CCA doesn't auto-renew — you must actively renew. Our compliance pack sends 45/30/7-day reminders to eliminate expiry surprises.
Can I renew a DSC after expiry?
Technically no — expired DSCs cannot be "renewed". You issue a fresh DSC. The process is the same as first-time issue:
- Fresh video KYC (mandatory)
- Fresh document upload
- Fresh certificate issued
- Same USB token can be re-used if compatible
Cost difference: Fresh issue vs renewal cost is roughly the same — CA fees are certificate-linked, not renewal-discount-linked.
Practical implication: If your MCA / GST / IT filing deadline is close and DSC has expired, you have a filing gap of 1-2 days minimum (fresh issue timeline). Late-filing penalties still apply — no leniency for expired DSC.
Best practice: Renew 30 days before expiry. Use compliance retainer tracking to eliminate this risk category entirely.
What if I lose my DSC token?
Immediate action:
- Report loss to the Certifying Authority within 24 hours (email + phone)
- Request certificate revocation from CA — prevents misuse
- Check CCA portal for revocation confirmation (2-4 hours)
- Apply for fresh DSC — cannot recover the lost certificate
Cost: Fresh DSC issuance cost (same as new). No refund on unused validity of lost certificate.
Legal protection: Under Section 5, IT Act 2000, revocation protects you from documents signed post-loss. Documents signed before revocation date remain your legal responsibility — hence the urgency to revoke promptly.
Prevention: Never leave token in shared computers. Use strong, unique password. Consider cloud DSC (no physical token to lose).
Which portals require DSC?
DSC is mandatory for these Indian government portals + filings:
- MCA V3 (mca.gov.in): SPICe+ incorporation, DIR-3 KYC, AOC-4, MGT-7, all annual filings, share transfers, board resolutions
- GST portal (gst.gov.in): Registration where Aadhaar auth not used, GSTR-3B, GSTR-9, refund applications, LUT filings
- Income Tax e-filing: Company + LLP + trust ITR, Form 3CA/3CB/3CD (audit reports), Form 3CEB (transfer pricing), Section 44AB audits
- DGFT (dgft.gov.in): IEC applications, RCMC, export incentive schemes, advance license
- ICEGATE (customs): Bill of Entry filing, shipping bills, drawback claims
- EPFO Unified Portal: ECR filing, KYC updates, employer amendments
- ESIC Portal: Monthly returns, employer amendments
- TRACES: TDS return corrections, employer downloads
- e-Tender + GeM: Bid submission, encrypted commercial terms (Combo DSC only)
- IREPS (Indian Railways): Railway procurement bids
Can I use one DSC for multiple companies?
Depends on DSC type:
- Individual DSC: Yes — one Individual DSC can sign personal filings across multiple contexts (e.g., you file ITR for yourself + are director in 3 companies). But for MCA director filings on behalf of each company, you'd typically prefer Organisation DSC.
- Organisation DSC: Tied to specific organisation. You need separate Organisation DSC per entity. A person who is director in 3 companies needs 3 Organisation DSCs (one per company) + optionally 1 Individual DSC for personal filings.
Cost optimization: If you're director in 5+ small companies with minimal filings, use Individual DSC where allowed + Organisation DSC only for entities with heavy MCA/GST activity.
Our advice: One Organisation DSC per active operating entity. Consider MCA V3 accepting Individual DSC for signing director e-forms (verify per form).
Can foreign nationals get DSC in India?
Yes — foreign nationals can obtain DSCs in India. Required documents:
- Valid passport (mandatory identity document)
- Address proof from home country, attested by:
- Indian Embassy in that country, OR
- Apostilled under the Hague Convention (if home country is signatory)
- Photograph, email, mobile number
- Video KYC completion (in CA's designated slot considering timezone)
Additional considerations:
- Foreign nationals cannot use Aadhaar (unavailable to them)
- Passport-based verification takes 3-7 days (vs 1-day for Indian nationals)
- Some CAs specialize in foreign national DSCs (eMudhra, Sify have best foreign-national workflow)
- Foreign directors of Indian companies commonly need Organisation DSC for MCA filings
What is Aadhaar e-Sign and does it replace DSC?
Aadhaar e-Sign is a lightweight alternative to DSC for certain use cases. It uses Aadhaar OTP or biometric authentication to sign documents electronically — no USB token, no certificate purchase, no video KYC.
Where Aadhaar e-Sign is accepted (2026):
- Low-risk contracts + agreements
- Bank KYC completion
- Some GST filings (limited)
- Individual ITR filing (as e-verification)
- Rental agreements, employment contracts
Where Aadhaar e-Sign is NOT sufficient (still need DSC):
- MCA V3 filings (SPICe+, MGT-7, AOC-4)
- Company/LLP ITR + audit reports
- e-Tender bid submissions
- Foreign national signatures (no Aadhaar)
- DGFT customs filings
- EPFO ECR filing
Trend: Aadhaar e-Sign is expanding — CCA and MeitY are working to accept it for more filings. But for corporate + tax + tender work in 2026, DSC remains mandatory.
Let's get your Class 3 DSC same-day.
WhatsApp us your PAN name + use case + validity. Free name-match check against PAN. Video KYC scheduled same day. Certificate issued before 3 PM if you apply before noon. USB token or Cloud DSC — your choice.