A digital signature certificate is a small piece of kit that can stall a large piece of work. A director cannot sign an incorporation form without one, a GST registration for a company stays unsubmitted, and an e-tender deadline passes while the token driver refuses to install.
If you are searching for the best digital signature certificate in Delhi, this page sets out what to compare: whether the certificate comes from a CA licensed by the Controller of Certifying Authorities, which class and type you actually need, how identity verification works now, how long the certificate lasts and what drives the price. It also covers what PC Media House does, and what only the licensed CA can do.
PC Media House is a Delhi-based agency, and we handle DSC applications online for individuals, directors, professionals and businesses across Delhi NCR and India. Pricing is a custom quote because it depends on the certificate type, the validity and the token, and we explain the factors below.
What a DSC is, and who issues it
A digital signature certificate binds a person or an organisation to a pair of cryptographic keys. When you sign a document or a return with the private key, anyone can verify with the public key that it came from you and was not altered afterwards. In India this is governed by the Information Technology Act, 2000 and by guidelines published by the Controller of Certifying Authorities (CCA), which licenses and regulates Certifying Authorities.
Only a licensed Certifying Authority can issue a DSC. On its licensed CAs page, the CCA lists 23 licensed authorities at the time of writing, and its FAQ notes that the CCA issues certificates only to the CAs, not to the public. This is the single most important filter when you choose a provider: a vendor that cannot tell you which licensed CA will issue your certificate is not one to trust with your identity documents.
We want to be plain about our role. PC Media House does not issue DSCs. We prepare your application, check your documents, guide you through the verification and set up the token, and the licensed CA issues the certificate.
Check any provider against the CCA's official list of licensed Certifying Authorities at cca.gov.in before sharing your Aadhaar or PAN.
Which class and type of DSC you need
Older guides talk about Class 1, Class 2 and Class 3. The current position in the CCA's Identity Verification Guidelines, Version 2.6 dated 16 June 2026, is that for individuals a CA issues a Class 3 level signing certificate and does not issue a Class 2 individual signing certificate alone. A Class 3 certificate can also carry the Class 2 identifier, so a Class 3 certificate is generally accepted where a portal asks for Class 2 or Class 3.
The practical choices are as follows.
- An individual certificate is issued to a person for signing documents in their own name.
- An organisational certificate links a named person to a company, LLP, firm or department and needs a letter of authorisation and proof of the organisation's existence.
- A signing certificate is what most users need for forms, returns and tenders.
- An encryption certificate or add-on is needed only on specific systems that ask for it.
- Portal-specific rules apply, for instance the GST portal accepts only PAN-based Class II and III certificates.
DSC and eSign are different
eSign is an online service in which a signature is created after Aadhaar-based authentication with an OTP, and no token is involved. A DSC is a certificate you hold yourself on a hardware token and can use again and again. Some portals allow eSign for certain users, as the GST portal does for taxpayers who are not in the mandatory DSC list, but companies and LLPs on that portal must use a DSC. Which method a filing accepts is decided by the portal, not by us or by the CA.
Before you apply, tell us which portals you will use. A certificate that works on one portal but fails a check on another is the commonest source of wasted time. For instance, a director filing company forms, signing GST applications and submitting income tax documents will usually want a certificate that is registered on all three.
Who needs a DSC, and for what
Directors and designated partners are the largest group. Company and LLP e-forms on the MCA portal are generally signed digitally, and the same person often signs GST and income tax filings. If you are setting up a new entity, the incorporation process itself begins with DSCs for the proposed directors, as we explain in our private limited company registration and LLP registration guides.
On GST, the portal makes DSC mandatory for the registration application of public and private limited companies, unlimited companies, foreign companies, LLPs, foreign LLPs and public sector undertakings. Other taxpayers can sign with a DSC or with eSign. If this is your situation, our GST registration service can run the DSC and the application together.
Professionals who sign on behalf of clients, exporters and importers using trade portals, and suppliers submitting e-tenders also rely on DSCs. For annual company filings, the same certificate is used, so it connects directly with ROC annual compliance.
A simple example: suppose a two-director trading company wants to file its first GST registration and then its annual return. Both directors need valid certificates, both need to be registered on the right portals, and neither can share a token. Planning this at the start avoids a hurried application near a deadline.
How the application works
The CA's process follows the CCA's Identity Verification Guidelines. Parts of it are technical, so we describe what you will see rather than every clause.
Step 1: Choose the type and validity
We confirm individual or organisational, the validity and the portals that will use it.
Step 2: Documents
You provide ID and address proof, PAN, an Aadhaar-linked mobile and, for organisations, the existence proof and a letter of authorisation.
Step 3: Aadhaar eKYC and video verification
The common route is Aadhaar-based eKYC. With an OTP, the guidelines require video verification as well. Video verification covers the applicant, the authorised signatory and the original documents, and the recording includes a one-time random code.
Step 4: CA review
The CA reviews the application and the recording. If a name or document does not match, the CA asks for a correction.
Step 5: Key generation and download
For Class 3 signing certificates, the key must be generated on a validated hardware token. The CA sets a maximum of 30 days to download the certificate once approved.
Step 6: Registration on portals
Install the token driver, register the certificate on each portal and test a signature.
Other routes exist: offline Aadhaar eKYC with a share code, PAN-based eKYC with video verification, and CA-assisted enrolment for applicants who do not have Aadhaar. The CA decides which route applies after looking at your documents.
Recent verification matters too. The guidelines require the verification to be recent when the certificate is issued, generally within the last two days, so a step done days earlier may need to be repeated. This is one reason it helps to have documents ready before you start.
Documents to keep ready
A DSC application fails more often on a name mismatch than on a missing document. The name on Aadhaar, PAN and the organisation's records should read the same way. If they differ, tell us at the start so we can ask the CA how it wants the mismatch handled.
- Aadhaar-linked mobile number, for the OTP step, and an active email address.
- PAN, because the GST portal and others accept only PAN-based certificates.
- A photo identity proof and, if asked, address proof not older than three months for utility bills.
- For companies and LLPs: the incorporation or registration certificate and the letter of authorisation for the signatory.
- A laptop or phone with camera and stable internet for the live video step.
- A USB port and permission to install the token driver on the computer you will use for filing.
If you are also planning other registrations such as import-export, our IEC registration page lists the documents that the same signatory will need, so you can prepare in one go.
Validity, fees and what changes the price
The CCA's X.509 Certificate Policy sets a maximum certificate lifetime of three years for a human subscriber's signature certificate. Licensed CAs commonly offer shorter terms as well, and which options are on sale is the CA's decision. A longer validity usually costs more on the day but saves repeat verification.
| Item | Amount | Notes |
|---|---|---|
| Government or statutory fee payable by the subscriber | No separate government fee | The licensed CA charges its own fee; confirm with the CA at the time of application |
| Certificate fee charged by the licensed CA | Varies by CA and validity | Longer validity and organisational certificates usually cost more |
| USB crypto token | Varies by make and whether you need a new one | Class 3 signing keys must sit on a validated hardware token |
| Encryption or special-purpose add-on | Quoted only if needed | Required for some portals, not for every user |
| PC Media House service fee | Custom quote | Depends on the number of certificates, type, validity and portal setup |
We quote after learning how many certificates you need and where you will use them. The quote lists the CA charge, the token and our service fee separately.
Why a custom quote and not a fixed price? Because the number of certificates, the type and the validity change the CA's charge, and because setup work differs. A single freelancer who needs a one-year signing certificate on a token they already own is a very different job from a company getting certificates for three directors with new tokens and portal registration.
Avoid any provider that promises an unusually low price without naming the CA. A certificate from a source that is not linked to a licensed CA may be rejected by portals or may be a misuse of your identity documents.
Applying alone or with help
Applying directly with a CA is straightforward for many individuals. Help makes more sense when you are applying for several people, or when the portals you use are strict about names and token setup.
| Point | Direct with a CA | With PC Media House assistance |
|---|---|---|
| Choice of certificate | You work out the class, type and validity yourself | We match the certificate to the portals you use |
| Documents | Errors show up after the CA reviews them | Names and documents are checked before the application |
| Video verification | You follow the CA's instructions on your own | We walk you through each step and what to expect |
| Token and portal setup | Driver and portal errors are left to you | We help install the token and register it on the portal |
| Who issues the DSC | The licensed CA | The licensed CA; we do not issue certificates |
| Cost | CA charge plus token | CA charge, token and a separate service fee |
Whichever route you take, confirm the CA is on the CCA's list of licensed Certifying Authorities.
If your need is only to sign documents for yourself occasionally, eSign with an Aadhaar OTP may be enough on some platforms, though portals decide which methods they accept. We can tell you quickly whether a DSC is needed at all.
Common mistakes to avoid
- Name mismatch between Aadhaar, PAN and company records, which delays CA approval or causes portal errors.
- Choosing an individual certificate when the portal expects one linked to the organisation.
- Dealing with an agent who cannot name the licensed CA, and sharing identity documents without checking.
- Losing the token or PIN and waiting before reporting it, when the certificate should be revoked immediately.
- Letting the certificate lapse close to a due date and discovering that renewal needs fresh verification.
- Sharing a token between two people, when each signatory must hold their own.
Most of these are small issues that become big only because of deadlines. A reminder system and a name check at the start prevent nearly all of them.
After issuance, renewal and how we work
Keep the token somewhere safe, write down which CA issued it and when it expires, and do not share the PIN. If an employee or director leaves, the organisational certificate should be revoked. Before expiry, apply for renewal in good time, since the CA will ask for verification again.
Looking after the token
- Keep the PIN private and never write it on the token or share it with a colleague.
- Do not leave the token plugged into a shared computer after you finish signing.
- Note the issuing CA, the serial number and the expiry date in a safe place, separate from the token.
- Report a lost or stolen token to the CA immediately so the certificate can be revoked.
- Revoke an organisational certificate when the signatory leaves the organisation.
The token is the thing that proves it is you signing. If someone else misuses it, you may have to answer for what was signed, which is why speed matters when a token goes missing.
Income tax and annual compliance work depend on a working DSC, so link renewals with your filing calendar. Our ITR filing team and our ROC compliance team can remind you when a certificate is due while a filing is coming up.
We work online from Delhi for clients across Delhi NCR and India. You share documents by email or WhatsApp, we guide you by call or video, and in-person meetings are by appointment only. The quote is itemised, the scope is written, and there are no hidden charges.
We cannot promise how fast any CA will approve an application, because that is outside our control, and we cannot promise that every portal will accept a certificate without a one-time fix. What we can promise is correct preparation and clear updates at each step. Tell us who needs a certificate and which portals they will use, and we will send you an itemised quote.
Frequently Asked Questions (FAQs)
A digital signature certificate, or DSC, is an electronic credential issued by a licensed Certifying Authority. It links a person or organisation to a cryptographic key, so documents signed with it can be verified for identity and integrity. It is stored on a protected USB token and is accepted on many government and business portals.
For individual signing certificates, CCA guidelines say a CA shall issue a Class 3 level certificate and shall not issue a Class 2 individual signing certificate alone. Class 3 certificates can also carry the Class 2 identifier. In practice, this means the Class 3 certificate is what you apply for.
The CA verifies identity through Aadhaar-based eKYC combined with live video verification, or through PAN eKYC with video verification, or through CA-assisted enrolment where needed. The video includes a one-time random code. For organisations, extra papers such as a letter of authorisation and proof of existence are checked.
The CCA's certificate policy allows a maximum of three years for a human subscriber's signature certificate. Licensed CAs commonly offer shorter options as well. Choose a validity that fits how long you will need to sign, and set a reminder before expiry so a filing is not held up.
Yes for Class 3 signing certificates. CCA guidelines require the key to be generated on a validated hardware cryptographic module, which is the USB token, and the token stays in the subscriber's custody. You need the token and its PIN every time you sign, so keep both safe.
Companies, LLPs, foreign companies and public sector undertakings must sign GST registration applications with a DSC. Other taxpayers may use a DSC or eSign. The portal accepts only PAN-based Class II and Class III certificates and needs the emSigner utility installed on the computer.
Only a Certifying Authority licensed by the Controller of Certifying Authorities. The CCA publishes the list of licensed CAs on its website. The CCA itself issues certificates only to CAs, not to the public. We help you apply through a licensed CA, and we do not issue certificates ourselves.
An expired certificate cannot be used to sign, so filings that need it will be blocked until you renew or apply for a new one. Renewal usually requires fresh verification as the CA's rules apply again. Start the process a few weeks before expiry, and re-register the new certificate on every portal where you use it.
No. A DSC is issued to a named person and must be held by that person. Each director or signatory who signs needs their own certificate, and an organisational certificate links that person to the company. If a signatory leaves, the certificate should be revoked.
The price depends on the CA, the type of certificate, the validity, and whether you need a new token. We quote each case individually, with the CA charge, the token and our service fee shown separately. There is no separate government fee for the subscriber, but the CA sets its own charges.
Sources and Official Links
Facts on this page were checked against the sources below, last reviewed on 7 October 2026. Fees, thresholds and rules can change, so confirm the current position on the official site before you pay or file.
- cca.gov.in
- cca.gov.in/licensed_ca.html
- cca.gov.in/faq.html
- cca.gov.in/guidelines.html
- cca.gov.in/sites/files/pdf/guidelines/CCA-IVG.pdf
- cca.gov.in/sites/files/pdf/guidelines/CCA-CP.pdf
- tutorial.gst.gov.in/userguide/loginanddsc/Register__Update_DSC.htm
- tutorial.gst.gov.in/userguide/registration/Verification_and_Submission.htm