Digital Signature Certificate: Meaning, Uses, and How to Get One

Digital Signature Certificate: Meaning, Uses, and How to Get One

A Digital Signature Certificate (DSC) helps you sign documents and submit certain forms online. Before obtaining one, check whether the portal requires a DSC, which certificate it accepts, and whose name it must bear.

Business Loan Types
Business Loan FAQ
Business Loan Videos

₹ 2 lakh – ₹ 80 lakh

Check your pre-approved business loan

Enter mobile and OTP | Check offer | Know your exact loan terms

  • In summary

    A Digital Signature Certificate (DSC) is an electronic credential issued by a licensed Certifying Authority (CA) that links a subscriber's identity with a digital signature and its signing key. It can support online filing, authentication, and document signing where a portal accepts or requires it.


    • A DSC can help verify the signatory and detect changes made to a digitally signed document.
    • MCA filings, selected Income Tax services, and e-tendering are examples of workflows that can use DSCs.
    • GST returns do not universally require DSC; the GST Portal states that GSTR-1 can also be filed using Electronic Verification Code (EVC).
    • Class 2 and Class 3 describe assurance levels. An organisational person certificate and a document signer certificate describe intended use, not additional assurance classes.
    • You obtain a DSC through a licensed Certifying Authority. Requirements for identity, organisation details, verification, validity, and the cryptographic token depend on the certificate and provider.

    For eligible business expenses, a Bajaj Finance Business Loan can be assessed separately from DSC procurement and digital compliance costs, subject to applicable terms and eligibility.

Show More
Show Less

What is a Digital Signature Certificate?

  • A Digital Signature Certificate is an electronic credential issued by a Certifying Authority to a subscriber. It associates the subscriber's identity with a public key used to verify a digital signature. The corresponding private key is used to create the signature and should remain under the subscriber's control.


    A digital signature is not the same as document encryption. A signature primarily supports authentication of the signer and detection of changes to the signed data.

Show More
Show Less

Where is a Digital Signature Certificate used?

  • A DSC can be used where an online service accepts or requires digital signing. The exact requirement depends on the portal, form, user category, and transaction.


    AreaHow DSC can be used
    MCA filingsUsed by eligible business users and authorised signatories for applicable company and LLP forms and submissions.
    Income TaxUsed for specified services, verification, and user categories. Some non-individual taxpayers use the DSC of the Principal Contact.
    GSTCan be used for electronic signing where supported. GSTR-1 can also be filed using EVC, so DSC is not mandatory for every taxpayer.
    E-tenderingMay be required to authenticate bids or submissions on tender portals, depending on portal rules.
    Other online servicesThe relevant portal determines whether a DSC is required, which class or certificate type is accepted, and whose certificate must be used.
Show More
Show Less

What are the benefits and limits of a DSC?

Benefit or limitWhat it means
Electronic signingAllows a subscriber to sign supported electronic documents and forms.
Identity associationThe certificate links the digital signature to the subscriber information recorded in the certificate.
Integrity checkingA valid verification process can indicate whether signed data has changed after signing.
Online filingA DSC can authenticate submissions on portals that support or require it.
Access controlThe signing key and token PIN must be protected because control of them affects the ability to create signatures.
Not encryptionA DSC and digital signature do not by themselves mean that the underlying document is encrypted.

Check your pre-approved business loan offer

What are the different DSC classes and types?

DSC terminology can refer to both assurance classes and intended-use categories. Do not treat an organisational person certificate or document signer certificate as a separate assurance class.


TermMeaning
Class 2An assurance class used for eligible digital certificates. The exact portal requirement should be checked before procurement.
Class 3A higher assurance class used where the relevant service or application requires it. The exact requirement depends on the portal.
Organisational person certificateA certificate associated with a person acting for an organisation. The authorised signatory requirements of the relevant portal still apply.
Document signer certificateA certificate intended for authenticated automated responses generated by an organisation's software. It is not a replacement for the authorised signatory's signature.

The Controller of Certifying Authorities (CCA) states that Class 2 and Class 3 signing keys are to be stored in a FIPS 140-2 Level 2 validated cryptographic token under the subscriber's custody.

Show More
Show Less

How do you get a Digital Signature Certificate?

  • You obtain a DSC from a licensed Certifying Authority rather than directly from the CCA. The exact application process and documents vary by provider and certificate type.


    • Check the portal requirement: Confirm whether the service needs a DSC, the accepted class or certificate type, and whose name or PAN must be associated with it.
    • Choose a Certifying Authority: Select a licensed provider that offers the required certificate.
    • Review the certificate package: Check validity, applicable charges, token requirements, renewal terms, and replacement conditions before placing the order.
    • Submit the required details: Provide the identity, contact, and organisation information requested by the Certifying Authority and complete its prescribed verification process.
    • Receive the certificate: The certificate is issued according to the provider's process, with the signing key handled through the applicable secure mechanism.
    • Register or associate it: Register the DSC with the relevant portal, such as MCA or Income Tax, before using it for supported transactions.

What documents are required for a DSC?

  • There is no single universal document list for every DSC. The Certifying Authority determines the documents and verification method based on the subscriber and certificate requested.


    Applicant or requirementPossible information or documents
    Individual subscriberIdentity details, contact information, PAN or other details requested by the Certifying Authority, and prescribed verification.
    Organisation-linked certificateOrganisation details and evidence of the subscriber's authority or relationship where required by the provider.
    Portal registrationThe portal may require an active account, registered PAN, authorised-signatory details, or other portal-specific prerequisites.
    Cryptographic tokenA compatible USB or other cryptographic token may be required for certificates that use token-based key storage.

    Do not assume that a board resolution, incorporation certificate, address proof, or a particular identity document is mandatory for every DSC. Check the selected Certifying Authority's current requirements.

How much does a Digital Signature Certificate cost?

DSC cost is not a single government-prescribed amount for every applicant. The amount you pay can depend on the Certifying Authority, certificate type, validity period, token, renewal, and replacement requirements.


Cost componentWhat can affect the cost
Certificate feeCertificate type, validity period, and Certifying Authority pricing.
Cryptographic tokenA USB or other secure token may be included in the package or charged separately.
RenewalA new certificate may attract a provider charge when the existing certificate expires.
ReplacementLoss, compromise, or other replacement events can result in provider-specific charges.
Portal or professional servicesOptional assistance for registration, configuration, or filing can have separate service charges.

Compare the total package cost and validity rather than relying on a certificate price alone. Keep any provider quotation or invoice for your records.

How do you register a DSC on online portals?

Registering on the Income Tax portal

The Income Tax Department states that registered users can register or re-register a DSC through the e-Filing portal. The stated prerequisites include a valid user account, the emsigner utility, a USB token from a Certifying Authority provider, and a Class 2 or Class 3 DSC.

  • Log in to the Income Tax e-Filing portal.
  • Open your profile and select the DSC registration option.
  • Confirm that the emsigner utility is installed and the DSC token is connected.
  • Select the certificate provider and certificate, enter the provider password or token PIN as prompted, and sign.
  • Complete registration and re-register the certificate when the existing DSC expires or when you need to update the registered certificate.

 

How do you associate a DSC on the MCA portal?

MCA guidance states that the user should install and run emBridge, use a Class 2 or higher DSC for the association process described in its guidance, and associate the certificate with the relevant user ID.

The exact form and signing requirements still depend on the MCA service and the role of the person signing.

 

Can you use a DSC on the GST Portal?

The GST Portal states that GSTR-1 can be electronically signed using a DSC or verified through EVC, and that DSC is not mandatory for any class of taxpayer for GSTR-1. Where DSC is used, the portal requires an active, non-expired DSC that is registered on the GST Portal, along with the required signing utility and token.

What should you do when a DSC expires or is lost?

If a DSC expires or is revoked, obtain a valid replacement and register or re-register it with the relevant portal before a filing or submission that requires the certificate. The Income Tax Department specifically provides a re-registration process for expired DSCs. 


  • If the token or signing key is lost or compromised, follow the Certifying Authority's revocation and replacement process.
  • Do not share the DSC token or PIN with unauthorised persons.
  • If an employee who holds an organisational DSC leaves the organisation, follow the required revocation and key-destruction process. The CCA states that the organisation should not retain the employee's DSC and signing keys. citeturn0search3
  • Check each portal separately because registration and replacement steps can differ.

What should a business check before buying a DSC?

  • Which portal and form you need to use.
  • Whether the portal requires Class 2, Class 3, or another specified certificate type.
  • Whose name, PAN, role, or authority must be associated with the certificate.
  • Whether a cryptographic token is included and how the signing key will be stored.
  • The certificate validity period, renewal process, replacement terms, and total cost.
  • Whether the DSC must be separately registered or associated with the portal before filing.

Can a Bajaj Finance Business Loan support digital upgrades?

A DSC is one part of a business's digital filing setup. A business planning expenditure on software, equipment, technology, or other eligible operating requirements can assess whether external finance fits its cash flow and repayment capacity.


A Bajaj Finance Business Loan offers loan amounts from Rs. 2 lakh to Rs. 80 lakh, repayment tenures from 12 months to 96 months. The loan should be assessed separately from the accounting or compliance treatment of a DSC. The borrowing decision should consider the eligible expense, total borrowing cost, expected cash flows, and repayment obligations.

How do you apply for a Bajaj Finance Business Loan?

  • Start the application: Go to the Bajaj Finance Business Loan page and select ‘Check Loan Offer’. Enter your mobile number and verify it using OTP.
  • Provide details: Enter personal and business information, including your name, PAN, date of birth, PIN code, and banking information.
  • Choose your loan requirement: Enter the required loan amount and select Term Loan, Flexi Dropline, or Flexi Hybrid Term Loan.
  • Select repayment tenure: Choose a repayment tenure from 12 months to 96 months.
  • Review and submit: Check the application details and submit the application for assessment.

Our loan variants

Frequently Asked Questions

Overview

Is a DSC mandatory for every GST return?

No. The GST Portal states that DSC is not mandatory for any class of taxpayer for GSTR-1 because EVC can also be used. Where a DSC is used, it must be active, non-expired, and registered on the GST Portal.

Is an organisational person certificate a separate DSC class?

No. Organisational person describes the intended association of the certificate with an individual acting for an organisation. Class 2 and Class 3 refer to assurance classes. A document signer certificate has a different automated-signing purpose and is not a substitute for an authorised signatory.

How much does a DSC cost?

There is no single price for every DSC. Cost can depend on the Certifying Authority, certificate type, validity, cryptographic token, renewal, replacement, and optional services. Compare the complete package rather than only the certificate fee.

Can you use an expired DSC?

No. A portal that requires a valid DSC will not accept an expired certificate. The Income Tax Department provides a re-registration process for an expired DSC, after which the valid certificate can be used for supported services.

Can you use a DSC without registering it on a portal?

Obtaining a DSC and registering it on a portal are separate steps. Where a portal requires registration or association, complete that process before using the certificate for the relevant filing or submission. Income Tax, MCA, and GST have their own registration or association requirements.

Show More Show Less

Disclaimer

Bajaj Finance Limited has the sole and absolute discretion, without assigning any reason to accept or reject any application. Terms and conditions apply*.