Overview of Applicability of clarification of DSC
Page Contents
What is a Digital Signature Certificate (DSC)?
A Digital Signature Certificate (DSC) is an electronic form of identity proof, similar to physical documents like PAN or passport, but used digitally to authenticate a person or organization. It enables secure access to online services and allows users to digitally sign documents, saving time and simplifying e‑governance interactions. All DSCs in India follow the IT Act, 2000, and the X.509 PKI standards.
Classes of Digital Signature Certificates
Clarifications on Use of Digital Signature Certificates : A Digital Signature Certificate (DSC) is used to authenticate documents electronically. Different government portals and regulatory authorities prescribe different DSC categories based on the nature of the filing, legal liability, and verification requirements.
1. Class 1 DSC
- Issued to private individuals only.
- Used to verify basic personal details like name and email.
- Not valid for companies or statutory filings.
- Verification includes:
- Aadhaar eKYC (biometric or OTP)
- Application form and documents
- Video verification
- Keys generated via software-based key storage.
2. Class 2 DSC
- Issued to individuals and business entities.
- Used when risk is moderate (e.g., tax filings).
- Confirms applicant details against trusted databases.
- Verification includes:
- Aadhaar eKYC
- Physical/OTP verification
- Video check
- Requires hardware crypto device (USB token) for key storage.
3. Class 3 DSC
- Highest assurance level, used where security risk is high.
- Required for e‑tenders, online auctions, ICEGATE, MCA filings, etc.
- Verification includes:
- Aadhaar eKYC biometric
- Physical appearance OR video verification
- Full document check
- Considered the most secure category.
Purpose‑wise applicability of Individual / Organisation DSC and Sign / Combo Types
Below is a detailed purpose-wise clarification:
1) Hallmark Registration – Organisation Sign Only :
Required DSC: Organization (Class 3) – Sign Only. BIS Hallmarking is issued in the name of a business entity (jeweler/manufacturer). The person signing must represent the organisation legally. Authentication must reflect the entity-level responsibility, not an individual’s personal identity. Digital signature certificates must contain the organization name and authorized signatory details. and person. Ensure authorization on company letterhead is uploaded on the BIS portal.
2) DPIIT (Startup India) – Organization Sign Only :
Required DSC: Organization (Class 3) – Sign Only. DPIIT recognition is granted to a registered entity (LLP, company, or partnership). Verification must establish the identity of the organization, not the personal user. The authorized signatory’s PAN must match the entity’s registration details.
3) RTO / Transport Department – Individual Sign Only. Required DSC:
Individual (Class 2/Class 3 as per state)—Sign Only. RTO services (Vahan, Sarathi, permit renewals, driving license, fitness, etc.) involve personal declarations, individual identity verification, and government mandates for individual verification of the person submitting forms. Even if filing for a company vehicle, RTO systems usually require individual DSC.
4) Tender (e‑Procurement)—Individual OR Organisation Based on Tender Type. Required DSC Options:
Individual Class 3 – Combo/Sign Only and Organisation Class 3 – Combo/Sign Only (depends on portal & tender category). Some procurement portals require the bidder’s authorized signatory to sign—an individual DSC is acceptable. Many government tenders require the DSC to reflect entity details; organization DSC becomes mandatory. Combo DSC (Sign + Encrypt) is often required because
-
- Sign = to sign bid documents
- Encrypt = to securely submit price bids
Check the tender document: “Bidder signing requirement”, PSUs and central government portals mostly prefer organization combo DSC.
5) ICEGATE (Customs) – Individual Sign Only of IEC Authorized Person:
Required DSC: Individual Class 3 – Sign Only. (Specifically of the IEC‑linked authorized signatory). And ICEGATE DSC for customs filing is legally the responsibility of the IEC holder’s authorized person. ICEGATE binds filings to the individual associated with IEC, not just to the entity. Ensures traceability for import/export documents, bills of entry, shipping bills, etc. DSC must match the PAN of the authorized signatory registered at ICEGATE. And Organisation DSC is not accepted.
6) GST / Income Tax / Trademark – Class 3 Sign Only DSC :
Required DSC – Class 3 – Individual or Organisation (as applicable) – Sign Only.
- GST Portal : Authorised signatory of the business can use an individual or Organisation DSC. Class 3 mandate is for enhanced authentication.
- Income Tax Portal : For companies, LLPs, and mandatory categories → Class 3 Individual/Org Sign Only. Used for Income tax return filing, Audit report submission, and e‑Verification of forms
- Trademark (IP India): Portal accepts both individual and Organisation DSC. Only Class 3 (Sign Only) is required, as filings involve legal declarations. The person must ensure the PAN in the DSC matches profile details on the respective portal. And Combo DSC is not needed since encryption is not required for these portals.
Steps to Apply for a Digital Signature Certificate
- Visit a Certifying Authority (CA) website like eMudhra or VSign.
- Select the entity type (Individual/Organization) and download the form.
- Fill out the form, attach a photo, sign, and verify details.
- Get identity/address proofs attested by an authorized officer.
- Pay fees via check/DD to the Local Registration Authority (LRA).
- Send documents (form + proofs + payment) to the LRA for processing.
DSCs are generally issued within 3 to 7 days after submission.
Quick Summary on Use of Digital Signature Certificates (DSC)
| Purpose / Portal | Allowed DSC | Why |
| Hallmark (BIS) | Org Sign Only | Filing is entity-based |
| DPIIT Startup India | Org Sign Only | Recognition granted to entity |
| RTO / Transport | Individual Sign Only | Personal verification required |
| Tender / e‑Procurement | Individual/Org. Sign or Combo | It depends on portal; a combo is often required |
| ICEGATE | Individual Sign Only | Must be IEC‑linked authorized signatory |
| GST | Class 3 Sign Only | Statutory requirement |
| Income Tax | Class 3 Sign Only | Mandatory for companies/LLPs |
| Trademark IP India | Class 3 Sign Only | Legal submission by applicant/agent |