Digital Signature Certificates: Classes, Uses and Renewal
Rohit Menon
· Founder & Product Architect· 3 min read
A digital signature certificate is the credential that lets you sign statutory filings electronically. The classification was simplified some years ago, which has left a good deal of outdated advice in circulation about which class to buy.
- ✓Class 3 is now the standard for all statutory filings.
- ✓Certificates are issued for one, two or three years.
- ✓Signing and encryption certificates serve different purposes.
- ✓An expired DSC blocks filings until replaced, with no grace period.
Classes
Class 1 and Class 2 certificates were discontinued for most purposes from January 2021. Class 3 is now the standard for MCA filings, income tax, GST, e-tendering, EPFO and trademark filings.
Within Class 3 there are signing certificates, encryption certificates, and combination certificates. Most statutory filing requires only a signing certificate; e-tendering generally requires both.
Obtaining one
Certificates are issued by licensed certifying authorities under the Controller of Certifying Authorities. Issue requires identity and address verification, now commonly done through Aadhaar-based video verification, and the certificate is delivered on a FIPS-compliant hardware token.
The token matters: a Class 3 certificate must be stored on hardware, not as a software file, which is what makes it difficult to copy or misuse.
Validity and renewal
Certificates are issued for one, two or three years. There is no grace period — on the expiry date the certificate stops working, and any filing in progress fails.
Renewal requires fresh verification and produces a new certificate rather than extending the old one, so it needs to be registered again on each portal where it was used. Starting the renewal two to three weeks before expiry avoids a filing deadline being missed.
Registering it on portals
A certificate must be associated with your account on each portal separately — MCA, the income tax e-filing portal, the GST portal, TRACES. Registering it on one does not register it elsewhere.
On the MCA portal the DSC is linked to a specific role: director, professional or authorised signatory. A certificate registered in one role cannot be used to sign in another.
Frequently asked questions
### Which class of DSC do I need?
Class 3, for virtually all statutory purposes. Class 1 and Class 2 certificates were discontinued for most uses from January 2021, so advice recommending Class 2 for income tax or MCA filings is out of date.
### How long is a DSC valid?
One, two or three years depending on what you purchase. There is no grace period after expiry, and a certificate that expires mid-filing causes the filing to fail.
### Can one DSC be used on multiple portals?
Yes, but it must be registered separately on each — MCA, income tax, GST and TRACES each require their own association. On MCA it is also linked to a specific role.
Related Dyopact Tools & Templates
Frequently Asked Questions
Which class of DSC do I need?
Class 3, for virtually all statutory purposes. Class 1 and Class 2 certificates were discontinued for most uses from January 2021, so advice recommending Class 2 for income tax or MCA filings is out of date.
How long is a DSC valid?
One, two or three years depending on what you purchase. There is no grace period after expiry, and a certificate that expires mid-filing causes the filing to fail.
Can one DSC be used on multiple portals?
Yes, but it must be registered separately on each — MCA, income tax, GST and TRACES each require their own association. On MCA it is also linked to a specific role.
Rohit Menon
Founder & Product ArchitectArchitecting business document operating systems and automated billing workflows for Indian SMBs, agencies, and enterprises.