Digital Signature Certificate (DSC): Class 3 Explained (2026)

A Class 3 digital signature certificate is the only class of DSC issued in India today. A Digital Signature Certificate (DSC) is a secure electronic key issued by a licensed Certifying Authority (CA) that verifies your identity and legally binds your signature to an electronic document. Following guidelines issued by the Controller of Certifying Authorities (CCA) on 26 November 2020, Class 1 and Class 2 certificates were discontinued from 1 January 2021, leaving Class 3 as the single standard for all government portal filings, from Income Tax and GST to MCA and DGFT.

This guide explains what a DSC is, how it works, who issues it, and why the Class 3 digital signature certificate is now mandatory.

What Is a Class 3 Digital Signature Certificate?

A Class 3 digital signature certificate is the highest-assurance DSC, issued only after rigorous identity verification of the applicant, typically through online interactive video verification conducted by the Certifying Authority. It is designed for environments where the risk of fraud or the value of transactions is high, which is why it is required for government filings, e-tendering, and e-procurement. Under the Information Technology Act, 2000, a document signed with a valid Class 3 DSC carries the same legal validity as a handwritten signature.

Why Only Class 3 DSC Is Issued Now

Before 2021, three classes existed. That is no longer the case:

• Class 1 DSC: verified identity against an email address or basic online identifier. Discontinued from 1 January 2021.
• Class 2 DSC: verified identity against a trusted pre-verified database. Discontinued from 1 January 2021. Certificates issued before that date remained valid until their natural expiry, but could not be renewed.
• Class 3 DSC: the highest level, requiring direct verification of the applicant. This is the only class issued today, for both individuals and organisations.

If you hold a certificate issued before 2021, it has long since expired. Any current filing on a government portal requires a Class 3 digital signature certificate.

How Does a Digital Signature Certificate Work?

A DSC relies on Public Key Infrastructure (PKI), which uses a mathematically linked pair of keys. Your private key stays secret on your USB token, while your public key is embedded in the certificate itself. When you sign a document, the private key generates a unique cryptographic hash that is attached to the file. The recipient uses your public key to verify that hash. If it matches, they know two things with certainty: the document has not been altered since signing, and it genuinely came from you.

What a Class 3 DSC Is Used For

A single Class 3 digital signature certificate works across government portals, though it must be registered separately on each one:

• Verifying identity of the sender of an electronic document
• Ensuring integrity, so any tampering after signing is immediately detectable
• Providing non-repudiation, meaning the signer cannot later deny having signed
• Filing on government portals including Income Tax, GST, MCA, EPFO, GeM, e-tender portals, DGFT, and ICEGATE
• Import and export compliance, such as IEC registration and licence applications on the DGFT portal

Who Issues a Digital Signature Certificate in India?

DSCs are issued by Certifying Authorities (CAs) licensed by the Controller of Certifying Authorities (CCA), an agency under the Ministry of Electronics and Information Technology. The CA is a trusted third party responsible for verifying your identity before issuing the certificate. Well-known licensed CAs include eMudhra, Capricorn, VSign, SafeScrypt, and others. Because the list of licensed CAs changes over time, always check the current list on the CCA website at cca.gov.in before purchasing a certificate.

What Is a USB Token and Why Do You Need One?

A USB token is a small hardware device that securely stores your digital signature certificate and private key. Since 1 January 2021, paper-based DSCs are no longer issued, so every Class 3 certificate is delivered on a secure token. The token connects to your computer via a USB port and ensures the private key never leaves the device, which is what makes the signature tamper-proof. One token can be used across multiple government portals, and a Class 3 DSC is typically valid for one or two years before it must be renewed.

How JPARKS INDIA Helps with Your DSC

At JPARKS INDIA, we help importers and exporters obtain the correct Class 3 digital signature certificate, register it on the portals they need, and resolve token and driver errors that hold up filings. We also handle the filings themselves, from IEC registration and annual updates to Advance Authorisation and EPCG applications. Having served 500+ importers and exporters since 2018, we make DSC and EXIM compliance straightforward. Learn more about our DSC services or book a free consultation.

Frequently Asked Questions

Q1. What is a Class 3 digital signature certificate?

A Class 3 digital signature certificate is the highest-assurance DSC, issued after direct identity verification of the applicant. It is the only class issued in India since 1 January 2021 and is required for all government portal filings.

Q2. Is Class 2 DSC still valid in India?

No. The CCA discontinued Class 1 and Class 2 DSC issuance from 1 January 2021. Certificates issued before that date stayed valid until expiry but could not be renewed, so any current filing needs a Class 3 DSC.

Q3. Who issues digital signature certificates in India?

DSCs are issued by Certifying Authorities licensed by the Controller of Certifying Authorities (CCA), an agency under the Ministry of Electronics and Information Technology. Check cca.gov.in for the current list of licensed CAs.

Q4. How long is a Class 3 DSC valid?

A Class 3 digital signature certificate is typically issued with a validity of one or two years from the date of issue, after which it must be renewed through a licensed Certifying Authority.

Q5. Can one DSC be used on multiple government portals?

Yes. A single Class 3 DSC on one USB token works across government portals such as Income Tax, GST, MCA, DGFT, and ICEGATE, but it must be registered or mapped separately on each portal.