What is a Digital Signature Certificate? Complete Guide for India

A Digital Signature Certificate (DSC) is the electronic equivalent of a physical signature in India. It's a cryptographic certificate issued by a licensed Certifying Authority (CA) under the framework of the Information Technology Act, 2000.

DSCs are governed by the Controller of Certifying Authorities (CCA), a body under the Ministry of Electronics and Information Technology. They provide the highest level of security for electronic transactions and are legally recognized under Section 3 of the IT Act.

How Digital Signatures Work

Digital signatures use Public Key Infrastructure (PKI) — the same technology used to secure HTTPS connections. When you sign a document with your DSC:

1. 1A cryptographic hash of the document is generated
2. 2This hash is encrypted using your private key (stored securely)
3. 3The encrypted hash (your signature) is embedded in the PDF along with your certificate
4. 4Anyone can verify by decrypting the hash with your public key and comparing it to the document

Types of DSC in India

India recognizes different classes of certificates, though the terminology has evolved. The most relevant today are:

Class 2 DSC — The most common type. Used for MCA filings, GST returns, Income Tax e-filing, and general business purposes. Identity is verified remotely through document submission and video KYC. Costs INR 500–1,500 with 1–3 year validity.

Class 3 DSC — Required for e-Tendering, e-Procurement, and high-security applications. Requires in-person or enhanced verification. Costs INR 1,500–3,000 with 1–3 year validity.

Signing Certificate vs. Encryption Certificate — Signing certificates (what most people need) authenticate your identity. Encryption certificates encrypt data. For document signing, you need a signing certificate.

How to Get a DSC

Getting a DSC in India is straightforward and typically takes 1–2 business days:

1. 1Choose a licensed CA — eMudhra, Sify, Pantasign, Capricorn, n(Code) are popular options
2. 2Submit required documents — PAN card, Aadhaar card, passport-size photograph, address proof
3. 3Complete video KYC — Most CAs now offer remote video verification (10–15 minutes)
4. 4Receive your DSC — Delivered as a .pfx file via email or on a USB token
5. 5Import into Falcon Sign — Settings → Certificates → Import .pfx file

Using Your DSC Without a USB Token

Traditionally, DSCs were issued exclusively on USB eTokens — physical devices that plugged into your computer and required specific driver software. This created major limitations: you could only sign from one computer, you had to carry the token everywhere, and if it broke, you were stuck.

Modern solutions like Falcon Sign eliminate this constraint entirely. You can export your certificate as a .pfx file (a software copy protected by a password) and import it into the app. Your private key is then stored in your phone's hardware security module — Android Keystore or iOS Secure Enclave — which is cryptographically equivalent in security to a USB token.

DSC Renewal and Expiry

DSCs have a fixed validity period (typically 1–3 years). When your certificate expires, any new signatures you create will be marked as invalid. However, documents you signed while the certificate was valid remain legally valid indefinitely.

Plan to renew 30 days before expiry. Most CAs send email reminders. The renewal process is the same as initial issuance — submit updated documents and complete video KYC.