Company Registration Business Registration

Digital Signature Certificate (DSC): New Rules and Process for 2026

Dhanush Prabha
8 min read 80.8K views
Digital Signature Certificate (DSC): New Rules and Process for 2026

A Digital Signature Certificate (DSC) is the backbone of online business compliance in India. From company registration to GST return filing, from DGFT export-import filings to MCA annual returns, almost every critical government filing requires a valid DSC. As of 2026, the rules around DSC issuance, verification, and usage have evolved significantly, with the shift towards cloud-based DSC and the phasing out of Class 1 and Class 2 certificates.

This guide provides a comprehensive overview of everything you need to know about Digital Signature Certificates in 2026, including the types, application process, new rules, costs, and practical tips for managing your DSC effectively.

What is a Digital Signature Certificate (DSC)?

A Digital Signature Certificate is an electronic credential issued by a government-licensed Certifying Authority (CA) that authenticates the identity of the person signing a document digitally. It uses Public Key Infrastructure (PKI) cryptography to bind the signer's identity to a pair of cryptographic keys (a public key and a private key), ensuring that the signed document is authentic, has not been tampered with, and can be legally attributed to the signer.

Under the Information Technology Act, 2000, a digital signature affixed using a valid DSC has the same legal standing as a handwritten signature. Section 5 of the IT Act explicitly recognizes digital signatures as legally valid for contracts, filings, and communications, except in cases specifically excluded (such as registered sale deeds, negotiable instruments, and wills other than privileged wills).

As of 2026, Class 3 DSC is the only active class of digital signature certificate being issued in India. Class 1 and Class 2 DSCs have been phased out and merged into Class 3. All references to DSC in this guide refer to Class 3 DSC.

Types of Digital Signature Certificates

While the current standard is Class 3, it is helpful to understand the historical classification of DSCs:

Class 1 DSC (Discontinued)

Class 1 DSC provided basic identity verification through email validation only. It was used for low-risk electronic transactions and personal email security. Class 1 DSCs are no longer issued as a standalone category.

Class 2 DSC (Merged with Class 3)

Class 2 DSC required identity verification against a trusted database (such as the Registrar of Companies database or income tax records). It was widely used for ROC filings, GST registration, and income tax return filing. In 2021, the CCA merged Class 2 into Class 3, and all Class 2 DSCs have since expired.

Class 3 DSC (Current Standard)

Class 3 DSC provides the highest level of identity assurance. The applicant must undergo rigorous identity verification, including video verification or in-person verification. Class 3 DSC is mandatory for all government filings and is the standard for business use in 2026.

DSC Classification: Historical Overview and Current Status
Class Verification Level Primary Use Status in 2026
Class 1 Email validation only Personal email security Discontinued
Class 2 Database verification ROC filings, GST, IT returns Merged with Class 3 (discontinued)
Class 3 In-person or video verification All government and business filings Active (only class available)

USB Token DSC vs. Cloud DSC: Which One to Choose in 2026?

One of the most important decisions when obtaining a DSC is whether to opt for a traditional USB token DSC or a modern cloud-based DSC.

USB Token DSC

A USB token DSC stores your digital signature on a physical hardware device (ePass 2003, Watchdata Proxkey, or similar). The token must be plugged into your computer whenever you need to sign a document. It is PIN-protected and provides a secure, offline storage mechanism for your private key.

  • Pros: No internet dependency for stored keys, physical control over the device, widely compatible with all government portals
  • Cons: Can be lost, damaged, or stolen; can only be used on one device at a time; requires driver installation on each computer

Cloud-Based DSC (Remote Signing)

Cloud DSC stores your digital signature on a secure cloud server maintained by the Certifying Authority. You access and use your DSC through a web portal or application, authenticating via OTP, biometrics, or multi-factor authentication. Cloud DSC eliminates the need for a physical token.

  • Pros: Sign from anywhere on any device, no physical token to lose, multi-factor authentication for security, easy to use
  • Cons: Requires internet connectivity to sign, not yet accepted on all legacy portals, cloud server downtime may delay signing
USB Token DSC vs. Cloud DSC: Detailed Comparison
Feature USB Token DSC Cloud DSC
Storage Physical USB device Secure cloud server
Portability Must carry the device Access from any device with internet
Security PIN-protected hardware token Multi-factor authentication (OTP + biometrics)
Ease of Use Requires driver installation No installation; browser-based signing
Risk of Loss Physical device can be lost or damaged No physical device to lose
Portal Compatibility Compatible with all portals Accepted on MCA, GST, DGFT (expanding)
Cost DSC fee + USB token purchase DSC fee (no token cost)
Best For Users who prefer physical control Frequent signers, remote workers, professionals

How to Apply for a DSC in 2026: Step-by-Step Process

Obtaining a DSC is a straightforward process. Here is the step-by-step guide:

Step 1: Choose a Licensed Certifying Authority

Select a Certifying Authority licensed by the CCA. The major CAs in India include:

  • eMudhra (one of the largest DSC issuers in India)
  • Sify Technologies
  • NSDL e-Governance Infrastructure
  • Capricorn Identity Services
  • CDAC (Centre for Development of Advanced Computing)

Step 2: Fill the Online Application Form

Visit the CA's website and fill out the online DSC application form. Provide your:

  • Full name (exactly as it appears on your PAN card)
  • PAN number
  • Email address
  • Mobile number
  • Address
  • DSC type: Signing only or Signing + Encryption
  • Validity: 1 year or 2 years
  • Token type: USB token or Cloud DSC

Step 3: Upload Identity and Address Documents

Upload scanned copies of: PAN card (mandatory), Aadhaar card (for address verification and video KYC), and a passport-size photograph. Foreign nationals must submit their passport and attested/apostilled address proof from their home country.

Step 4: Complete Video Verification

As of 2026, most CAs require video-based verification instead of in-person verification. You will receive a link to join a video call with the CA's verification officer, who will verify your identity by cross-checking your face with the photographs on your ID documents. This step takes approximately 5 to 10 minutes.

Step 5: Make Payment

Pay the DSC fee online through the CA's payment gateway. The cost varies based on the validity period and DSC type chosen.

Step 6: Download and Install the DSC

After verification and payment, the CA will issue your DSC. For USB token DSC, download the certificate and install it on your USB token. For cloud DSC, you will receive login credentials to access your DSC through the CA's cloud signing portal.

For Indian nationals with valid PAN and Aadhaar, the DSC is typically issued within 1 to 2 business days. For foreign nationals, the process may take 3 to 7 business days due to additional document verification.

Documents Required for DSC Application

Documents Required for DSC: Indian Nationals vs. Foreign Nationals
Document Indian Nationals Foreign Nationals
PAN Card Mandatory Not applicable (use passport)
Aadhaar Card Required for video KYC Not applicable
Passport Optional (alternative ID) Mandatory
Address Proof Aadhaar or passport Home country address proof (attested/apostilled)
Photograph Passport-size photo Passport-size photo
Email & Mobile Active email and mobile number Active email and mobile number
Authorization Letter Only if applying on behalf of a company May be required for director appointment filings

DSC Cost in 2026

DSC pricing varies depending on the Certifying Authority, validity period, and type of certificate. Here are the approximate costs as of 2026:

Approximate DSC Costs in 2026 (INR)
DSC Type Validity Approximate Cost
Class 3 (Signing Only) 1 Year INR 800 to INR 1,500
Class 3 (Signing Only) 2 Years INR 1,200 to INR 2,500
Class 3 (Signing + Encryption) 1 Year INR 2,000 to INR 3,500
Class 3 (Signing + Encryption) 2 Years INR 3,000 to INR 5,000
USB Token (ePass 2003) Lifetime (reusable) INR 300 to INR 500

New DSC Rules and Changes in 2026

The digital signature ecosystem in India has seen significant changes over the past few years. Here are the key developments effective in 2026:

1. Class 3 is the Only Active Class

With the phasing out of Class 1 and Class 2 certificates, Class 3 DSC is now the sole standard for all digital signing needs. This simplifies the process for applicants who no longer need to choose between classes.

2. Video Verification is Now Standard

Most Certifying Authorities now use video-based verification instead of requiring applicants to visit a physical verification center. This makes the DSC issuance process faster and more accessible, especially for applicants in remote areas.

3. Cloud DSC Adoption is Accelerating

The MCA, GST portal, and DGFT now support cloud-based DSC for filings. This eliminates the need for USB tokens and allows professionals to sign documents from any device with internet access. Cloud DSC adoption has been particularly popular among Chartered Accountants and Company Secretaries who file for multiple clients.

4. Stricter Identity Verification Protocols

The CCA has mandated enhanced identity verification processes for all Certifying Authorities, including PAN-Aadhaar linkage verification, liveliness detection during video KYC, and real-time validation against government databases. These measures reduce the risk of fraudulent DSC issuance.

5. Aadhaar-Based e-Sign Expansion

The government is expanding the use of Aadhaar-based e-Sign for low-risk filings, allowing individuals and proprietors to sign certain documents without a DSC. This includes GST filings for proprietors, Form 16 signing, and insurance document signing. However, DSC remains mandatory for company directors and LLP partners for MCA filings.

6. Interoperability and Cross-Border Recognition

India is working towards international mutual recognition agreements for digital signatures, which would allow DSCs issued in India to be recognized in other countries for trade and commercial documentation. This is particularly relevant for exporters and businesses with international operations.

Where is DSC Required? Key Use Cases

A DSC is required for a wide range of business and government filings, including:

  • Company Registration: Mandatory for filing SPICe+ form, signing MoA and AoA, and director appointments
  • LLP Registration: Required for filing FiLLiP form and LLP agreement on MCA
  • ROC Annual Filing: Directors and Company Secretaries sign annual returns (MGT-7) and financial statements (AOC-4) using DSC
  • DIR-3 KYC: Annual KYC filing for directors requires DSC
  • GST Registration: Companies and LLPs must use DSC for GST registration applications
  • GST Return Filing: GSTR-1, GSTR-3B, and GSTR-9 require DSC for companies and LLPs
  • IEC Registration (DGFT): Import Export Code application and modification require DSC
  • EPFO and ESIC: Employer registration and monthly return filings
  • e-Tendering: Vendor registration and bid submission on GeM, CPPP, and state portals
  • Income Tax: Filing returns above specified thresholds and signing tax audit reports
  • Trademark Registration: Agents and attorneys file trademark applications using DSC on the IP India portal

Common DSC Issues and Troubleshooting

Users frequently encounter the following issues with DSCs. Here is how to resolve them:

DSC Not Detected by the Portal

If a government portal does not detect your DSC, ensure that: the USB token driver is installed correctly (try reinstalling the latest version), the token is plugged in properly, the Java Runtime Environment (JRE) is installed and updated (some portals still require Java applets), and the browser is compatible (some portals work best with Chrome or Edge with specific extensions).

Name Mismatch Error

Ensure the name on your DSC matches exactly with the name on your PAN card and the name registered on the portal. Even minor differences (initials, middle name, spacing) can cause rejection. If there is a mismatch, you will need to apply for a new DSC with the correct name.

DSC Expired During Filing

Always check your DSC expiry date before starting a filing. If your DSC expires mid-filing, you must renew the DSC, re-register it on the portal, and re-sign the documents. Set a reminder 30 days before expiry to ensure continuity.

Forgot USB Token PIN

If you forget your USB token PIN and exceed the maximum attempts, the token gets locked. In most cases, you will need to reset the token (which erases the stored DSC) and re-download your certificate from the CA. If the CA does not support re-download, you may need to purchase a new DSC.

DSC for Specific Business Structures

DSC Requirements by Business Structure
Business Structure Who Needs DSC Mandatory For
Private Limited Company All directors (at minimum 2) Incorporation, annual ROC filings, all MCA forms
Public Limited Company All directors (at minimum 3) Incorporation, annual filings, SEBI compliance
One Person Company (OPC) Sole director Incorporation, annual ROC filings
Limited Liability Partnership (LLP) All designated partners (at minimum 2) FiLLiP form, LLP agreement, annual filings
Partnership Firm Optional (not required for registration) GST filings if applicable, income tax above threshold
Sole Proprietorship Proprietor (optional, e-Sign available) GST filings (e-Sign accepted), DGFT filings
Section 8 Company (NGO) All directors Incorporation, annual ROC filings, compliance forms

Conclusion

A Digital Signature Certificate is not just a compliance requirement. It is the gateway to conducting business digitally in India. In 2026, with the standardization of Class 3 DSC, the growth of cloud-based signing, and the expansion of government portals, having a valid DSC is more important than ever for company directors, professionals, and business owners.

Whether you are incorporating a new company, filing annual returns, registering for GST, or participating in government tenders, a valid DSC ensures your filings are accepted and your documents carry full legal weight. With video verification making the application process faster and cloud DSC making signing more convenient, there has never been an easier time to obtain and manage your digital signature.

At IncorpX, we help thousands of business owners and professionals obtain their DSC and manage their compliance filings. Whether you need a DSC for company registration, GST registration, or annual ROC filings, our team handles the entire process so you can focus on growing your business.

Frequently Asked Questions

What is a Digital Signature Certificate (DSC)?
A Digital Signature Certificate (DSC) is an electronic form of a signature that authenticates the identity of the person signing a document digitally. Issued by a Certifying Authority (CA) licensed by the Controller of Certifying Authorities (CCA) under the Information Technology Act, 2000, a DSC is the digital equivalent of a handwritten signature and provides a higher level of security and authenticity for online transactions, filings, and legal documents.
What are the types of Digital Signature Certificates?
There are three types of DSCs in India: Class 1 DSC provides basic identity verification through email validation and is used for low-risk transactions; Class 2 DSC was previously used for ROC filings, IT returns, and GST but has been merged with Class 3 since 2021; and Class 3 DSC offers the highest level of identity assurance with in-person verification and is now the standard for all government filings, including MCA, GST, DGFT, e-Tendering, and more. As of 2026, Class 3 is the only DSC class actively issued for business and government purposes.
Is Class 2 DSC still valid in 2026?
No, Class 2 DSC is no longer issued as a separate category. The Controller of Certifying Authorities (CCA) merged Class 2 and Class 3 categories in 2021. All existing Class 2 DSCs have either expired or been phased out. As of 2026, only Class 3 DSC is available for issuance, and it serves all purposes previously covered by both Class 2 and Class 3 certificates.
Who needs a Digital Signature Certificate?
A DSC is required by: company directors for MCA filings and incorporation; chartered accountants, company secretaries, and cost accountants for signing audit reports and filings; GST taxpayers for signing GST returns and applications; importers and exporters for DGFT filings; individuals participating in e-tendering and e-procurement; professionals filing income tax returns above specified thresholds; and anyone who needs to sign documents electronically with legal validity under the IT Act, 2000.
How long is a DSC valid?
A DSC is typically valid for 1 year or 2 years from the date of issuance, depending on the plan chosen at the time of application. The validity period is set by the Certifying Authority. After expiry, the DSC must be renewed by submitting a fresh application. Using an expired DSC will result in rejection of any filings or signed documents.
How much does a DSC cost in 2026?
The cost of a DSC in 2026 varies depending on the Certifying Authority, validity period, and whether you choose a USB token or paperless DSC. Approximate costs are: 1-year Class 3 DSC (signing only) costs INR 800 to INR 1,500; 2-year Class 3 DSC (signing only) costs INR 1,200 to INR 2,500; 1-year Class 3 DSC (signing + encryption) costs INR 2,000 to INR 3,500; and USB token costs an additional INR 300 to INR 500 if not already owned. Paperless or cloud-based DSCs may have different pricing.
What is the difference between a USB token DSC and a cloud DSC?
A USB token DSC stores the digital signature on a physical USB device (like an ePass or Watchdata token). It requires the USB device to be plugged into a computer when signing documents. A cloud DSC (remote signing) stores the digital signature on a secure cloud server, allowing the user to sign documents from anywhere without a physical device. Cloud DSC uses multi-factor authentication (OTP, biometrics) for security. The MCA and many government portals now support cloud-based DSC for convenience.
What is e-Sign and how is it different from DSC?
e-Sign is a government-approved electronic signature service based on Aadhaar authentication. It is a lightweight, one-time-use digital signature that does not require a physical USB token or prior DSC issuance. e-Sign is different from DSC in that DSC is a certificate-based signature valid for 1 to 2 years and reusable for multiple documents, while e-Sign is Aadhaar-based and generated for each signing event. e-Sign is commonly used for signing Form 16, insurance documents, and other low-volume signing needs, while DSC is required for MCA filings, GST, and other statutory filings.
How do I apply for a DSC in 2026?
To apply for a DSC in 2026, follow these steps: Step 1: Choose a licensed Certifying Authority (CA) such as eMudhra, Sify, NSDL, or Capricorn. Step 2: Fill out the online application form with your personal details (name as per PAN, email, phone number). Step 3: Submit identity and address proof documents (PAN card, Aadhaar, passport for foreign nationals). Step 4: Complete video verification or in-person verification as required by the CA. Step 5: Make the payment online. Step 6: Download and install your DSC on a USB token or access it via cloud signing. The entire process typically takes 1 to 3 business days.
What documents are needed to apply for a DSC?
For Indian nationals, the documents required are: PAN card (mandatory), Aadhaar card or passport for address verification, a passport-size photograph, and an email address and mobile number linked to the application. For foreign nationals, the documents required are: passport (mandatory), address proof from the home country (attested and apostilled), and an email address and mobile number. Some Certifying Authorities may ask for additional documents such as a letter of authorization if the DSC is being procured for a company director.
Can a DSC be used on multiple devices?
It depends on the type of DSC. A USB token DSC can only be used on the device to which the USB token is connected at any given time. You can plug it into different computers, but only one at a time. A cloud DSC can be accessed from any device with internet access, as the signing key is stored on a secure cloud server. This makes cloud DSC more flexible for users who need to sign documents while travelling or working remotely.
What is a DSC used for in company registration?
A DSC is mandatory for company registration in India. It is required for: filing the SPICe+ form on the MCA portal for company incorporation, signing the Memorandum of Association (MoA) and Articles of Association (AoA), filing DIR-12 for director appointments, signing annual compliance documents such as ROC annual filings, and signing board resolutions and shareholder resolutions that are filed electronically. Every proposed director must have a valid DSC before the incorporation process can begin.
What happens if my DSC expires while a filing is pending?
If your DSC expires while a filing is pending on the MCA portal or any other government portal, the filing will not be processed and may be rejected. You will need to renew your DSC immediately and re-sign the documents before resubmitting the filing. To avoid this situation, always check your DSC's expiry date before initiating any filing and renew it at least 2 weeks before it expires.
How do I renew my DSC?
Renewing a DSC follows a process similar to the initial application: Step 1: Contact your Certifying Authority or visit their website. Step 2: Fill out the renewal form with your updated details. Step 3: Submit updated identity and address documents if required. Step 4: Complete video verification. Step 5: Pay the renewal fee. Step 6: Download the renewed DSC to your USB token or access it via cloud. Some CAs allow early renewal (30 days before expiry) to ensure continuity. The renewed DSC will have a new validity period of 1 or 2 years from the date of renewal.
Can I use the same DSC for MCA, GST, DGFT, and income tax filings?
Yes, a single Class 3 DSC can be used across multiple government portals, including MCA (for company filings), GST (for GST registration and return filing), DGFT (for IEC registration and export-import filings), income tax (for filing returns above specified thresholds), EPFO and ESIC portals, e-tendering and e-procurement portals, and the IRDA portal for insurance filings. You need to register your DSC separately on each portal where you intend to use it.
How do I register my DSC on the MCA portal?
To register your DSC on the MCA (V3) portal: Step 1: Log in to the MCA portal at mca.gov.in. Step 2: Navigate to 'My Profile' and click on 'DSC Registration'. Step 3: Select 'Associate DSC' and enter your DSC details. Step 4: Sign the registration form using your USB token or cloud DSC. Step 5: Submit and verify. The DSC will be linked to your MCA account, and you can use it to sign all filings. Only one DSC can be associated with an MCA account at a time. To change the DSC, you must first disassociate the old one.
What is the role of DSC in GST compliance?
A DSC plays a critical role in GST compliance: it is required for signing GST registration applications for companies and LLPs, signing GST returns (GSTR-1, GSTR-3B, GSTR-9), filing for GST cancellation or revocation, responding to GST notices and show-cause orders, and filing refund applications. For proprietorship firms and individual taxpayers, GST filings can be signed using Aadhaar-based e-Sign instead of DSC. For companies and LLPs, DSC is mandatory.
What are the new DSC rules for 2026?
Key DSC-related changes and rules applicable in 2026 include: Class 3 is the only DSC class available for issuance (Class 1 and 2 phased out); mandatory video verification for DSC issuance has replaced in-person verification for most applicants; cloud-based DSC (remote signing) is now widely accepted on MCA, GST, and DGFT portals; the CCA has mandated stricter identity verification protocols for Certifying Authorities; Aadhaar-based e-Sign is being expanded to cover more filing types, reducing the need for DSC in low-risk filings; and cross-border recognition of digital signatures is being discussed for international trade facilitation under upcoming digital trade agreements.
Can a foreign national get a DSC in India?
Yes, a foreign national can obtain a DSC in India. The process requires: a valid passport (mandatory identity document), address proof from the home country (attested by the Indian Embassy or apostilled under the Hague Convention), and video verification with the Certifying Authority. Foreign nationals who are directors in Indian companies must have a valid DSC for all MCA filings. The DSC application process for foreign nationals may take 3 to 7 business days due to additional verification steps.
What is a Certifying Authority (CA)?
A Certifying Authority (CA) is an organization licensed by the Controller of Certifying Authorities (CCA) under the Information Technology Act, 2000, to issue Digital Signature Certificates. Licensed CAs in India include eMudhra, Sify Technologies, NSDL e-Governance, Capricorn Identity Services, and IDRBT. The CA verifies the applicant's identity, issues the DSC, and maintains a record of all certificates issued. Only DSCs issued by a CCA-licensed CA are legally valid in India.
Can I use a DSC for signing contracts and agreements?
Yes, a DSC can be used to sign contracts and agreements with full legal validity under the Information Technology Act, 2000. Section 5 of the IT Act provides that a digital signature has the same legal effect as a handwritten signature. DSC-signed documents are admissible as evidence under the Indian Evidence Act (now Bharatiya Sakshya Adhiniyam, 2023) and are considered reliable in legal proceedings. However, some documents, such as registered sale deeds and wills (except privileged wills), still require wet signatures under specific laws.
What is a DSC ePass or USB token?
A DSC ePass (or USB token) is a small hardware device similar to a pen drive that stores your digital signature securely. The most commonly used tokens in India are the ePass 2003 and Watchdata Proxkey. The USB token is PIN-protected to prevent unauthorized use. When you need to sign a document digitally, the USB token must be plugged into your computer, and you will be prompted to enter the PIN. The token is purchased separately from the DSC and can be reused when the DSC is renewed.
How do I install a DSC on my computer?
To install a DSC on your computer: Step 1: Install the USB token driver software (ePass or Proxkey driver) on your computer. Step 2: Plug in the USB token and enter the PIN when prompted. Step 3: Open the token management utility (e.g., ePass2003 Manager). Step 4: Import the DSC certificate file (.pfx) into the token using the 'Import Certificate' option. Step 5: Verify the installation by opening the certificate details in the token manager. For cloud DSC, no physical installation is needed. You access the signing service through a web portal and authenticate using OTP or biometrics.
What should I do if my DSC USB token is lost or damaged?
If your DSC USB token is lost or stolen: Step 1: Immediately contact your Certifying Authority and request revocation of the DSC to prevent misuse. Step 2: File a police complaint for the lost/stolen token (recommended for documentation). Step 3: Apply for a new DSC from the same or a different CA. Step 4: Purchase a new USB token if the old one is damaged or lost. Step 5: Re-register the new DSC on all government portals (MCA, GST, DGFT, etc.). The new DSC will have a fresh validity period and may have a different certificate number.
Can two people share the same DSC?
No, a DSC is strictly personal and cannot be shared between two individuals. Each DSC is linked to the signatory's PAN, name, and email address, and using someone else's DSC to sign a document is illegal and amounts to fraud. If a document is signed using another person's DSC, the filing may be rejected, and legal action can be taken against the person who misused the certificate. Every director, partner, or authorized signatory must have their own separate DSC.
What is the role of DSC in e-Tendering?
In government e-tendering and e-procurement, a valid Class 3 DSC is mandatory to: register as a vendor or bidder on portals like GeM (Government e-Marketplace), CPPP, and state procurement portals; upload and sign tender documents; submit bids electronically; and sign contracts awarded through the e-procurement process. Without a valid DSC, businesses cannot participate in government tenders, which represent a significant revenue opportunity for many companies.
What is the difference between a signing DSC and an encryption DSC?
A signing DSC is used to digitally sign documents, ensuring the authenticity and integrity of the signed content. It proves that the document was signed by the certificate holder and has not been altered. An encryption DSC is used to encrypt and decrypt electronic documents and communications, ensuring confidentiality. For most business and government filings, a signing-only DSC is sufficient. Encryption DSCs are needed for specific use cases such as secure email communication and encrypted data exchange. Some CAs offer a combined signing + encryption DSC.
Can I revoke my DSC before it expires?
Yes, you can request revocation of your DSC at any time by contacting your Certifying Authority. Common reasons for revocation include: the USB token is lost or stolen, the DSC holder's private key has been compromised, the information in the DSC (name, email) needs to be changed, or the certificate holder no longer needs the DSC. Once revoked, the DSC is added to the Certificate Revocation List (CRL) maintained by the CA, and any documents signed with the revoked DSC after the revocation date will be considered invalid.
What is the penalty for forging a digital signature?
Under Section 74 of the Information Technology Act, 2000, any person who creates, publishes, or makes available a digital signature certificate for fraudulent or unlawful purposes is liable for imprisonment of up to two years and a fine of up to INR 1 lakh. Additionally, under Section 66C of the IT Act, using another person's digital signature dishonestly is identity theft, punishable with imprisonment of up to three years and a fine of up to INR 1 lakh.
How is a DSC different from an electronic signature?
A Digital Signature Certificate (DSC) is a specific type of electronic signature that uses PKI (Public Key Infrastructure) cryptography to authenticate the signer and ensure document integrity. It is issued by a licensed Certifying Authority. An electronic signature is a broader term that includes any electronic method of signing, such as typing your name, scanned signatures, e-Sign, and click-to-agree. Under Indian law, DSC provides the highest level of legal assurance and is mandatory for statutory filings, while other forms of electronic signatures may be accepted for private agreements.
What government portals require DSC for filings?
DSC is required for filings on multiple government portals, including: MCA (Ministry of Corporate Affairs) for company registration, annual filings, and director changes; GST Portal for registration and return filing; DGFT for IEC registration and trade facilitation; Income Tax Portal for filing returns above specified thresholds; EPFO and ESIC for employer registrations and filings; GeM and CPPP for e-tendering and government procurement; IRDA for insurance company filings; and various state government portals for specific compliance filings.
What happens if there is a name mismatch on my DSC?
If the name on your DSC does not exactly match the name on your PAN card or the name registered on the government portal (MCA, GST, etc.), your filings will be rejected. This is one of the most common issues with DSC. To fix a name mismatch: ensure the name on your DSC application matches your PAN card name exactly (including middle name and spelling); if the DSC has already been issued with a wrong name, you must apply for a new DSC with the correct name; and ensure the name on the government portal matches the name on the DSC. Minor differences like initials vs full name can cause rejections.
Can a company apply for a DSC, or is it only for individuals?
DSCs are issued only to individuals, not to companies or entities. However, a company's authorized representatives (directors, company secretaries, and authorized signatories) can obtain DSCs in their personal names and use them to sign documents on behalf of the company. For specific filings, the company must designate an authorized signatory whose DSC will be used for that portal. For example, a company must register a specific director's DSC on the MCA portal for filing annual returns.
What is the validity of a document signed with an expired DSC?
A document signed with a valid DSC remains valid even after the DSC expires, as long as the DSC was valid at the time of signing. The digital signature is timestamped at the time of signing, which proves that the certificate was valid when the signature was applied. However, you cannot use an expired DSC to sign new documents. Government portals will reject any filing signed with an expired DSC. This is why timely renewal is essential.
How do I check the status or validity of my DSC?
You can check your DSC's validity by: Method 1: Plug in your USB token, open the token management utility, and view the certificate details including expiry date and status. Method 2: Visit the CCA website (cca.gov.in) and use the DSC verification tool to check if your certificate is valid or revoked. Method 3: On the MCA portal, go to 'My Profile' and check the DSC registration status. Method 4: For cloud DSC, log in to your CA's portal and view your certificate status. Always verify your DSC status before initiating any important filing.
Tags:
Written by Dhanush Prabha

Dhanush Prabha is the Chief Technology Officer and Chief Marketing Officer at IncorpX, where he leads product engineering, platform architecture, and data-driven growth strategy. With over half a decade of experience in full-stack development, scalable systems design, and performance marketing, he oversees the technical infrastructure and digital acquisition channels that power IncorpX. Dhanush specializes in building high-performance web applications, SEO and AEO-optimized content frameworks, marketing automation pipelines, and conversion-focused user experiences. He has architected and deployed multiple SaaS platforms, API-first applications, and enterprise-grade systems from the ground up. His writing spans technology, business registration, startup strategy, and digital transformation - offering clear, research-backed insights drawn from hands-on engineering and growth leadership. He is passionate about helping founders and professionals make informed decisions through practical, real-world content.

Related Articles

Business Succession Planning in India: How to Protect Your Company's Future

Business Succession Planning in India: How to Protect Your Company's Future

Dhanush Prabha
Feb 27, 2026
How to Set Up a Foreign Subsidiary Company in India: Complete Guide

How to Set Up a Foreign Subsidiary Company in India: Complete Guide

Dhanush Prabha
Feb 27, 2026
Government Schemes for MSMEs in 2026: Updated Benefits and How to Apply

Government Schemes for MSMEs in 2026: Updated Benefits and How to Apply

Dhanush Prabha
Feb 27, 2026
Browse All Blogs