Getting a Digital Signature Certificate (DSC) online is a four-stage process: choose a Certifying Authority (CA) licensed by India's Controller of Certifying Authorities (CCA), complete the online application with Aadhaar- or PAN-based eKYC plus a short video verification, pay the fee, and download the issued certificate onto a FIPS-certified USB crypto token. With documents ready, the whole journey — from form to usable token — can be finished without visiting any office.

This guide walks through each stage: what a DSC is, which type and class you need, the documents to prepare, the step-by-step application flow, realistic timelines and costs, and how to use and renew your certificate safely.

What a Digital Signature Certificate Is and Who Issues It

A Digital Signature Certificate is the electronic equivalent of a handwritten signature — a digital credential that binds your verified identity to a cryptographic key pair. Under India's Information Technology Act, 2000, DSCs are legally recognized and mandatory for a wide range of official transactions: income tax e-filing for companies, GST returns, MCA/ROC filings, e-tendering portals, and EPFO and DGFT submissions.

DSCs are not issued by just any vendor. Only Certifying Authorities licensed by the CCA — the government body regulating India's public key infrastructure — can issue legally valid certificates. When you "apply online," you apply through one of these licensed CAs or their authorized registration partners. The official list of licensed CAs is published on the CCA website, and checking that list before paying anyone is the single most important fraud check in the process.

A DSC is also distinct from the broader category of electronic signatures: it is a government-regulated credential tied to Indian compliance workflows, while a general e-signature is a broader legal concept used worldwide for contracts and approvals. If your goal is signing everyday business documents rather than filing with Indian authorities, our guide on how to make an electronic signature covers the lighter-weight path.

DSC Types at a Glance: Which Certificate Do You Need?

Before you open any application form, decide which certificate you actually need — applying for the wrong type is the most common reason for rework. The CCA has consolidated its class system: Class 1 and Class 2 certificates have been phased out, and Class 3 is now the standard for essentially all individual and organizational use.

Certificate typeWho it is forTypical use cases
Class 3 Signing — IndividualA single person, issued in their own nameIncome tax e-filing, GST, MCA director filings, EPFO
Class 3 Signing — OrganizationA company or firm, issued to an authorized signatoryROC/MCA corporate filings, company GST, DGFT
Class 3 Encryption (or Sign + Encrypt combo)Users of e-tendering / e-procurement portalsEncrypting bid documents on government tender portals
Document Signer CertificateOrganizations signing documents in bulkAutomated, server-side signing of invoices, certificates, statements

Two practical rules of thumb:

  • If a portal says "Class 3 DSC required," a Class 3 Signing certificate is the default answer. For e-tendering, check whether the portal also requires encryption — many do, and a combo certificate saves a second purchase.
  • Validity is a choice, not a type. DSCs are typically issued for one, two, or three years; longer validity means fewer renewals but a higher upfront fee.

Documents and Details to Prepare Before You Apply

The online process moves fast only if your paperwork is ready first. For an individual Class 3 DSC, prepare:

  • PAN card — your primary identity proof; the name on your application must match it exactly
  • Aadhaar card — enables the fastest paperless eKYC route via OTP on your Aadhaar-linked mobile number
  • A recent passport-style photograph in digital form
  • An active email address and mobile number — verified during the process and recorded in your certificate
  • Address proof if your eKYC route requires it (requirements vary slightly by CA)

For an organization DSC, add the company's proof of existence (such as a certificate of incorporation or GST registration), an authorization letter naming the applicant as authorized signatory, and the signatory's personal identity documents as above.

You will also record a short verification video — typically reading a statement or showing your ID to the camera — so apply from a quiet place with a working camera and microphone. Finally, if you do not already own one, you need a FIPS-certified USB crypto token to store the certificate; most CAs offer to ship one with your application.

How to Get a DSC Certificate Online in 6 Steps

Here is the complete flow as it works across licensed CAs:

  1. Choose a CCA-licensed Certifying Authority. Start from the official list of licensed CAs on the CCA website rather than from search ads. Compare the application flow, token pricing, and support — and never share documents with a site you cannot trace back to a licensed CA.
  2. Select your certificate type, class, and validity. Use the table above: for most people this is Class 3 Signing, individual or organization, valid for one to three years.
  3. Fill in the online application form. Enter your details exactly as they appear on your PAN and upload your photograph and documents. Name mismatches are the top cause of rejection at this stage.
  4. Complete eKYC and video verification. Authenticate via Aadhaar OTP (fastest) or the CA's alternative eKYC route, then record the verification video as prompted. Both steps happen online in minutes.
  5. Pay the application fee. Keep the receipt and application reference number for tracking and support.
  6. Download the certificate onto your USB token. Once approved, install the token's driver software, plug in the token, set a strong PIN, and download the certificate into it. Your DSC is now ready to use on any compliant portal.

Keep the token and its PIN separate, and store the application reference until you have signed successfully at least once.

How Long It Takes and What It Typically Costs

Timelines and prices are set by each CA, so treat the following as orientation — always confirm on the CA's official website before you pay.

On timing, a complete paperless application with successful Aadhaar eKYC and video verification is often approved the same day or within one to two working days. Organization certificates, manual reviews, or name mismatches can add several working days; courier delivery of a new token adds shipping time.

On cost, expect a modest fee that varies with certificate type (signing vs. sign-plus-encrypt), applicant type, validity length, and whether a USB token is included. Individual signing certificates sit at the low end; organization and combo certificates with multi-year validity and a new token sit higher. Any price quoted far below the general market range from a site you cannot verify against the CCA list is a red flag, not a bargain.

After Issuance: Using, Renewing, and Staying Secure

A DSC is a regulated credential, and a few habits keep it valid and safe:

  • Protect the token and PIN. The private key never leaves the USB token, so whoever holds the token and PIN can sign as you. Never share either.
  • Verify what you sign and what others sign. Our guide on how to validate a signature in a PDF shows how to check signature panels, certificate chains, and revocation status.
  • Renew before expiry. DSCs cannot be extended after they lapse — renewal is a fresh, though usually faster, application. Start a few weeks before the expiry date printed in the certificate, especially if the DSC is tied to time-critical filings.
  • Revoke immediately if compromised. If the token is lost or the PIN may be exposed, contact the issuing CA to revoke the certificate, then apply for a replacement.

When a Personal DSC Is Not Enough: Team Signing with Nota Sign

A DSC solves a specific problem exceptionally well: one verified individual signing into regulated Indian government and compliance portals. It is not designed for the other side of business signing — routing a contract to five approvers, chasing a customer's signature on a phone, or keeping an audit trail for every envelope. That is the territory of electronic signature providers; teams comparing options can start with our overviews of DocuSign alternatives and free e-signature apps.

Nota Sign is FaDaDa's global electronic signature platform, built for exactly this team-scale signing. FaDaDa has been ranked first in China's e-signature software market by IDC for consecutive years, and Nota Sign extends that foundation internationally: legal coverage across more than 100 countries and regions, deep APAC compliance including iAM Smart and Singpass, support for SES, AES, and QES signature levels, and regional data centers for data-residency requirements. The Nota Sign electronic signature product supports templates, multi-channel delivery, and full audit trails out of the box. On pricing, Nota Sign's positioning is friendly to smaller teams — no per-seat fees — while mid-market and enterprise buyers can work with the team on tailored plans.

If your organization has outgrown one-token-at-a-time signing, talk to the Nota Sign team about a plan that fits your document volume and compliance footprint.