Digital Signature Certificates (DSC) in India: Class-2, Class-3, Types, Legal Validity, Manufacturers, and Practical Usage

Digital Signature Certificates (DSC) are a foundational element of secure electronic transactions in India. They are legally recognized tools used to authenticate identity, ensure data integrity, and provide non-repudiation for online filings, e-tendering, e-auction platforms, and secure PDF signing.

This Knowledge Base article provides a detailed, technical, and India-specific overview of DSCs, including Class-2 and Class-3, types of digital signatures, legal validity, manufacturer ecosystem, and step-by-step usage in PDF software, government portals, and auction platforms.

What Is a Digital Signature Certificate (DSC)?

A Digital Signature Certificate is an electronic credential issued by a licensed Certifying Authority (CA) that binds an individual or organization’s identity to a cryptographic key pair.

In India, DSCs are governed by the Information Technology Act, 2000 and are legally equivalent to handwritten signatures when issued and used as per regulations.

Technical Explanation: How Digital Signatures Work

Core Cryptographic Concept

Digital signatures use Public Key Infrastructure (PKI):

Private Key  → Used to SIGN data (kept secret)
Public Key   → Used to VERIFY signature (shared)

Signing Process (Simplified)

1. Document is hashed (SHA-256)
2. Hash is encrypted using the signer’s private key
3. Signature + certificate attached to document
4. Verifier uses public key to validate authenticity

What Digital Signatures Guarantee

• Authentication – Confirms signer identity

• Integrity – Detects document tampering

• Non-repudiation – Signer cannot deny signing

Types of Digital Signatures (By Usage)

1. Signing Certificate

• Used for document signing

• Common for PDFs, filings, tenders

2. Encryption Certificate

• Used to encrypt emails or data

• Ensures confidentiality

3. Signing + Encryption (Combo)

• Includes both capabilities

• Common for enterprise users

DSC Classes in India (As per Earlier Framework)

⚠️ Important Note
Class-2 DSCs have been phased out for most new issuances.
Class-3 is currently the standard and highest level for most government and commercial usage.

Class-2 Digital Signature Certificate

Characteristics

• Identity verified against trusted databases

• Moderate assurance level

Earlier Usage

• Income Tax filing

• MCA filings

• GST portals (earlier)

Current Status

• No longer issued for new users

• Existing Class-2 certificates may be migrated

Class-3 Digital Signature Certificate (Highest Assurance)

Characteristics

• In-person or video-based verification

• Strong identity validation

• Stored in USB cryptographic token

Mandatory Usage Areas

• Government e-tendering

• Government & private e-auction portals

• High-value transactions

• Legal and contractual documents

Sub-Types of Class-3 DSC

• Individual

• Organization

• Foreign national (with passport verification)

Legal Value of Digital Signatures in India

Digital signatures are legally enforceable under:

• Information Technology Act, 2000

• Indian Evidence Act (electronic records)

Legal Standing

DSC Storage Medium: USB Cryptographic Tokens

Why Tokens Are Used

• Secure private key storage

• Prevents key extraction

• Hardware-based protection

Major DSC Certifying Authorities (Manufacturers) in India

Licensed by the Controller of Certifying Authorities (CCA), India:

• eMudhra

• Sify

• Capricorn CA

• NSDL e‑Gov

• VSign

Usage of DSC in India (Major Portals)

Government Portals

• Income Tax e-Filing

• MCA (Company filings)

• GST Portal

• EPFO / ESIC

• ICEGATE (Customs)

Government e-Auction & Tender Sites

• GeM (Government e-Marketplace)

• e-Procurement portals

• State & PSU tender portals

Private Auction Platforms

• Bank auctions

• Asset reconstruction company portals

• Industrial e-auctions

Usage of DSC in PDF Software

Adobe Acrobat Reader / Acrobat Pro

Supported Features

• PAdES-compliant digital signatures

• Timestamping

• Signature validation panel

Steps: Sign a PDF in Adobe Acrobat

1. Insert USB DSC token
2. Open PDF in Adobe Acrobat
3. Tools → Certificates → Digitally Sign
4. Select signature area
5. Choose DSC certificate
6. Enter token PIN
7. Save signed PDF

Other PDF Software Supporting DSC

• Foxit PDF Editor

• Nitro PDF

• LibreOffice (limited support)

Step-by-Step: Using DSC on e-Auction / Tender Sites

1. Install DSC token drivers
2. Install emSigner / portal utility
3. Register DSC on portal
4. Insert USB token
5. Login and select tender/auction
6. Digitally sign bid documents
7. Submit bid securely

Common Issues & Fixes

Issue: DSC not detected

Fix

• Reinstall token drivers

• Try different USB port

• Run browser as administrator

Issue: emSigner not working

Fix

• Allow localhost ports

• Disable conflicting antivirus temporarily

• Use supported browser

Issue: Certificate expired

Fix

• Renew DSC before expiry

• Re-register on portals

Issue: PIN locked

Fix

• Contact issuing CA

• Token reset or replacement required

Security Considerations

• Never share DSC token or PIN

• Use strong token PIN

• Remove token after use

• Renew certificates on time

• Use official CA websites only

• Avoid using DSC on public computers

Best Practices

• Prefer Class-3 DSC for all professional use

• Keep DSC validity aligned with compliance needs

• Maintain backup of signed documents

• Regularly update token drivers

• Re-register DSC after renewal

• Assign separate DSCs for individuals and organizations

Conclusion

Digital Signature Certificates are a legally recognized, security-critical component of India’s digital governance and business ecosystem. With Class-3 DSCs now being the standard, understanding their types, legal value, manufacturer ecosystem, and correct usage in PDF software, government portals, and auction platforms is essential for compliance, security, and operational efficiency.