Complete Guide
Everything you need to know about Class 3 Digital Signature Certificates, what they are, who needs one, what they cost, and where they're actually used, in one place.
A Class 3 Digital Signature Certificate (DSC) is an electronic credential, issued by a CCA-licensed Certifying Authority, that legally identifies you (or your organization) when signing documents or transacting online. It's the digital equivalent of a handwritten signature and a notarized ID combined, backed by 2048-bit RSA encryption and stored on a secure USB crypto token so it can't be copied or misused.
It carries the highest level of identity assurance among DSCs, verified either through Aadhaar-based eKYC or a video call with your Certifying Authority. Once issued, it's legally valid under the Information Technology Act, 2000, which means documents signed with it carry the same legal standing as a physically signed and witnessed document.
The "Class 3" designation comes from the CCA's (Controller of Certifying Authorities) classification of assurance levels. The CCA is the government body under the Ministry of Electronics and IT that licenses every Certifying Authority permitted to issue DSCs in India, eMudhra, Capricorn CA, vSign, and SpeedSign among them. This licensing structure is what makes a DSC legally different from, say, an Aadhaar-based e-Sign: a DSC is tied to a specific, verified private cryptographic key that only you hold, generated and stored on your own USB token, never on a shared server.
Since January 2021, Class 3 is also the only class of DSC issued in India, more on that below. Practically, this means that whether you're an individual taxpayer, a company director, or a foreign national signing on behalf of an overseas entity, the certificate you need is always a Class 3, the differences lie in whether it's issued as Individual or Organization, and whether it includes Signing, Encryption, or both.
Older documentation sometimes references "Class 2" DSCs, which required lighter identity verification and were used for lower-assurance filings. The CCA discontinued Class 2 DSCs on 1 January 2021, standardizing on Class 3 for every use case, individual tax filing, company compliance, tenders, everything. If you're researching DSCs and see "Class 2" mentioned, that information is out of date.
Read the full story on Class 2's discontinuation →Every Class 3 DSC falls into one of three types, and choosing the right one matters, buying the wrong type means re-purchasing later.
Authenticates and signs documents. Covers MCA, GST, and Income Tax filing, the most common type for most individuals and businesses.
Secures document confidentiality during transmission. Rarely bought alone, usually paired with Signing as a Combo.
Signing + Encryption together. Required for ICEGATE, GeM, IREPS, and other portals that need encrypted submissions.
A DSC is issued to a specific person, but it can represent either just that individual, or that individual acting on behalf of a registered company, LLP, or firm.
For professionals, freelancers, CAs, CS, taxpayers, and anyone filing in their own name. Covers Income Tax, MCA director filings, GST, and more.
Issued to an authorized signatory, but carries the company/LLP's name too. Required for company GST filing, MCA/ROC compliance, and tenders.
Common audiences who typically need a Class 3 DSC:
Class 3 DSC is accepted across nearly every Indian government portal that requires identity verification for filing or transactions.
For an Individual DSC, the process is fully paperless: Aadhaar card, PAN card, an Aadhaar-linked mobile number for OTP, and a valid email address. No physical document submission, courier, or office visit is needed, the Aadhaar eKYC step verifies your name, date of birth, and photo directly against the UIDAI database.
For an Organization DSC, requirements vary by entity type, since the certificate needs to verify both the authorized signatory's identity and the organization's legal existence:
A GST Registration Certificate isn't strictly mandatory for any of these, if your entity has one, including it can help streamline verification, but incorporation documents alone are usually sufficient.
Decide Individual vs Organization, and Signing vs Combo, based on which portals you'll use.
Send your requirement over WhatsApp or phone, along with the relevant PAN/Aadhaar or entity documents.
A short Aadhaar OTP-based or video verification call confirms your identity, no office visit needed.
The CA issues your certificate, loaded onto a USB crypto token, then dispatched to your address.
Pricing depends on four factors: certificate type (Signing, Encryption, or Combo), holder type (Individual or Organization), validity period, and which Certifying Authority issues it, different CAs price the same certificate differently, sometimes by a meaningful margin.
As a starting point: Signing DSC begins around ₹650 for the certificate itself, Combo DSC around ₹1,400, both excluding the USB token and service charges, which are usually bundled into the final total you pay. Longer validity periods (2 or 3 years) generally work out cheaper per year than renewing a 1-year certificate repeatedly, since you're not repeating the issuance overhead each time.
Because CA pricing genuinely varies, it's worth comparing rather than accepting the first quote you're given, this is exactly why a live rate comparison is more useful than a single fixed number.
See the live price comparison →Class 3 DSCs are issued for 1, 2, or 3-year validity, with longer terms working out cheaper per year. Once a certificate expires, it can no longer be used to sign anything, renewal isn't an extension, it's a fresh issuance requiring new eKYC verification.
How to renew your DSC online →Even a correctly issued DSC can run into friction, usually a driver issue, an expired certificate, or a token that isn't communicating with the browser. Most of these are quick fixes once you know which one you're dealing with:
Every Class 3 DSC in India is issued by one of a handful of CCA-licensed Certifying Authorities, currently including eMudhra, Capricorn CA, vSign (Verasys), and SpeedSign. Functionally, a Class 3 DSC from any of them carries identical legal validity, the IT Act 2000 doesn't distinguish between CAs, they're all equally licensed and regulated.
Where they genuinely differ is pricing, processing speed, and which USB tokens they issue by default. This is exactly why comparing rates across CAs before buying matters more than picking a name you've heard of, you're not sacrificing anything on validity or legal standing by choosing the more affordable, faster option.
Aadhaar-based e-Sign lets individuals sign certain documents using an OTP alone, without a physical USB token. It's convenient, but it's tied to a centralized government service at the moment of signing, and it isn't accepted for every filing, companies and LLPs specifically require a DSC for most MCA, GST, and tender-related transactions, e-Sign isn't available to them as an alternative.
A DSC, by contrast, uses a private key that only you control, stored on a USB token in your possession. It works offline once issued, doesn't depend on a live OTP each time, and is the only accepted method for organization-level filings and for any portal (ICEGATE, GeM, IREPS) requiring Combo-level encryption.
The highest-assurance digital signature certificate issued by CCA-licensed Certifying Authorities in India, verified through Aadhaar eKYC or video verification, and legally valid under the IT Act 2000 for signing and encrypting electronic documents.
Yes. Class 2 DSCs were discontinued by the CCA on 1 January 2021. Class 3 is the only class currently issued in India, for both individuals and organizations.
Signing DSC authenticates and signs documents, covering MCA, GST, and Income Tax filing. Encryption DSC secures document confidentiality. Combo DSC includes both and is required for portals like ICEGATE, GeM, and IREPS that need encrypted submissions.
With Aadhaar-based eKYC, a Class 3 DSC can typically be issued within a day of completing the application, video verification, and payment. The physical USB token is then dispatched separately.
Pricing depends on certificate type and validity period. Signing DSC starts from roughly ₹650 for the certificate, Combo DSC from around ₹1,400, varying by Certifying Authority. See the full calculator →
Class 3 DSCs are issued for 1, 2, or 3-year validity periods. Once expired, a fresh certificate with new eKYC verification is required, renewal does not extend the old certificate.
Same-day issuance, doorstep token delivery, and transparent multi-CA pricing.