Rated 4.9/5 by 312+ Chennai clientsZero penalty record across all filings24-hour response · WhatsApp-first supportOffices: Maduravoyal, Nerkundram & Nolambur (upcoming)15+ years of expert tax & compliance consulting500+ active clients across 243 Chennai areasRated 4.9/5 by 312+ Chennai clientsZero penalty record across all filings24-hour response · WhatsApp-first supportOffices: Maduravoyal, Nerkundram & Nolambur (upcoming)15+ years of expert tax & compliance consulting500+ active clients across 243 Chennai areas
Kellys · near Kellys Junction · Class 3 DSC desk

Class 3 DSC for Kellys (PIN 600010)

End-to-end Class 3 DSC for Kellys residential transit pocket establishments — with WhatsApp-first document intake

Handling Class 3 DSC for Kellys and Kilpauk clients with on-time portal submission and full statutory reconciliation. Call 9566-068-468.

4.9
312+ Reviews
15+ Years
Zero Penalties
500+ Clients
Quick Answer

How is Class 3 DSC different from Aadhaar eSign in Kellys, Chennai?

Class 3 DSC is a long-term PKI certificate (1/2/3 year validity) stored on a FIPS 140-2 USB token used for repeated signing across MCA, GST, TRACES and tenders. Aadhaar eSign is a one-time signature with a 30-minute certificate, no hardware token and is suitable for one-off documents like loan agreements or e-NACH mandates. eSign requires the signer to be a resident with an Aadhaar-linked mobile; DSC has no such restriction.

Transparent Pricing

Class 3 DSC in Kellys — Plans & Pricing

Fixed fees · Zero hidden charges · Call 9566-068-468 for a custom quote.

MonthlyAnnualSave 2 Months
Personal DSC
Class 3 DSC 1 Year
Class 3 DSC 1-year video KYC
₹1,500one-time

  • Class 3 DSC 2-Year Validity
  • Video KYC No Physical Visit
  • USB Token Included
  • MCA21 + GST + TRACES + DGFT Portals
  • e-Tender Portal Registration
  • Director + Company DSC Bundle
  • Next-Day KYC Appointment
Most Popular ⭐
Class 3 DSC 2 Years
Class 3 DSC 2-year video KYC
₹2,000one-time

  • Class 3 DSC 2-Year Validity
  • Video KYC No Physical Visit
  • USB Token Included
  • MCA21 + GST + TRACES + DGFT Portals
  • e-Tender Portal Registration
  • Director + Company DSC Bundle
  • Next-Day KYC Appointment
Most Popular ⭐
Class 3 DSC 2 Years + Token
Class 3 DSC 2-year video KYC + Token Device
₹2,500one-time

  • Class 3 DSC 2-Year Validity
  • Video KYC No Physical Visit
  • USB Token Included
  • MCA21 + GST + TRACES + DGFT Portals
  • e-Tender Portal Registration
  • Director + Company DSC Bundle
  • Next-Day KYC Appointment
Director + Company
Company DSC
DSCs + all portal registrations
₹4,500one-time

  • Class 3 DSC 2-Year Validity
  • Video KYC No Physical Visit
  • USB Token Included
  • MCA21 + GST + TRACES + DGFT Portals
  • e-Tender Portal Registration
  • Director + Company DSC Bundle
  • Next-Day KYC Appointment

Swipe to see all plans

Prices exclude GST. For enterprise pricing, call 9566-068-468.

Why FilingPro?

Why Kellys Clients Choose FilingPro

Expert Class 3 DSC in Kellys — qualified professionals, 15+ years experience, zero-penalty track record.

Class 2 Deprecation Migration

Kellys clients holding pre-1-Jan-2021 Class 2 DSCs that have expired or are nearing expiry are migrated to Class 3 with full Aadhaar e-KYC re-verification — no continuity of older Class 2 certificates is permitted under the CCA notification dated 17-Dec-2020.

Authorisation Letter & Board Resolution Drafting

For Kellys corporate clients, FilingPro drafts the authorisation letter on the entity's letterhead and the board resolution naming the signatory — accepted format across CCA-licensed CAs for organisation DSC issuance.

Multi-Director Pack Coordination

For Kellys companies needing the full board's DSCs (Premium plan — 5 directors), FilingPro coordinates all five Aadhaar e-KYCs sequentially in a single working day with USB tokens preloaded and shipped together.

Encryption + Signing Pair for Tendering

e-Tendering on CPPP, GeM and State portals frequently requires both signing and encryption certificates. FilingPro supplies the certificate pair on Premium plan with proper key-usage extensions configured per CCA Interoperability Guidelines.

CRL & OCSP Revocation Coverage

On token loss, employment change or key compromise, FilingPro coordinates revocation under Section 38 IT Act with the issuing CA — the certificate is added to the CRL and OCSP responder under the CCA Interoperability Guidelines, protecting Kellys clients from misuse liability.

USB Token Driver & Browser Setup

EmSigner

Key Benefits

What Kellys Clients Get

Every Class 3 DSC engagement delivers measurable, guaranteed outcomes — expert professionals, on time, every time.

TRACES TDS Filing Without Hiccups
Form 24Q, 26Q, 27Q and 27EQ quarterly filings on TRACES require Class 3 DSC for corporate deductors. Kellys companies file on or before the 31st of the month following the quarter without Section 234E late fee.
Tender Bidding on CPPP and GeM
Government tendering on the Central Public Procurement Portal and GeM requires both encryption and signing certificates. Kellys bidders on Premium plan receive both, configured for the relevant tender portal upload.
Income Tax e-Verification by DSC
Companies, partnerships and political parties must verify ITRs by DSC under Rule 12 of the Income-tax Rules. Individual taxpayers in Kellys also use DSC as an alternative to Aadhaar OTP/EVC for high-value or audit-bearing returns.
DGFT IEC and Customs IceGate Filing
Class 3 organisation DSC enables Kellys exporters and importers to file IEC applications on DGFT and Bills of Entry/Shipping Bills on IceGate without portal-side authentication failure.
Hardware-Secure Private Key
The private key never leaves the FIPS 140-2 USB token under CCA Interoperability Guidelines — even if the host PC is compromised, the Kellys client's signing key cannot be exfiltrated.
Revocation Protection on Loss
Lost or compromised tokens are revoked under Section 38 IT Act and added to CRL/OCSP within hours — third-party reliance on the certificate stops immediately, protecting Kellys clients from forged-signature liability.
Comparison

Class 3 Signature DSC vs Class 3 Combo DSC

Why this matters here — Across Kellys, the business activity radiating outward from Kellys Junction and nearby commercial pockets. Practitioners note that with quick access via Kellys Bus Stop and feeder routes connecting Kellys to the rest of Chennai.

AspectClass 3 Signature DSCClass 3 Combo DSC
Indicative costApproximately ₹1,200–₹1,500 one-time inclusive of the token, Aadhaar e-KYC and video verification, for a 2-year certificateApproximately ₹1,800–₹2,500 one-time for the same 2-year term, the premium reflecting the additional encryption key pair and its separate CCA-mandated verification
Statutory basisIssued under Section 35 of the Information Technology Act 2000 read with Rule 23 of the IT (Certifying Authorities) Rules 2000 and the CCA India X.509 Certificate Policy v1.6 (2021) — carries only the signing key pair used for authentication and non-repudiationIssued under the same Section 35 IT Act 2000 framework but provisions two key pairs on one token — a signing certificate plus a separate encryption certificate under the CCA Interoperability Guidelines 2021 for confidentiality of exchanged data
What it actually doesDigitally signs and time-stamps a document so the signer cannot repudiate it — sufficient for MCA21 V3, GST, Income-tax, EPFO, TRACES and ROC filings where only authentication is requiredSigns documents AND decrypts encrypted data — mandatory where the portal encrypts payloads back to the holder, chiefly e-Procurement (GeM, CPPP, state e-tender portals) and IP India trademark/patent e-filing
Who typically needs itDirectors, proprietors, tax practitioners and authorised signatories filing statutory returns — the overwhelming majority of Chennai business usersContractors and vendors bidding on government e-tenders, exporters on ICEGATE tender modules, and applicants filing trademarks or patents where bid or filing data is returned encrypted
Token and standardStored on a FIPS 140-2 Level 2 crypto USB token (ePass2003 / mToken / ProxKey); one key pair and one certificate on the deviceSame FIPS 140-2 Level 2 token but holds two certificates — losing or corrupting the token invalidates both the signing and encryption keys together
Validity and renewalIssued for 1, 2 or 3 years; renewed via fresh Aadhaar/PAN e-KYC before expiry — an expired signature certificate silently blocks the next MCA or GST filingSame 1–3 year validity, but on renewal the encryption certificate must also be re-keyed; data encrypted to the old key cannot be decrypted with the new one, so archive access must be planned before renewal
Documents Required

Documents for Class 3 DSC

Share documents via WhatsApp to 9566-068-468. No office visit required for Kellys clients.

PAN of the applicant (mandatory for both individual and organisation DSC)
Aadhaar of the applicant with Aadhaar-linked mobile number for OTP-based e-KYC
Recent passport-size photograph (live video frame captured during e-KYC)
Mobile and email OTP confirmations for applicant validation under CCA IVG 2021
Authorisation letter on entity's letterhead naming the signatory (organisation DSC only)
Organisation PAN plus GSTIN/CIN/LLPIN proof (organisation DSC only)
Ready to Get Started?
WhatsApp your documents to 9566-068-468 — our team begins within 24 hours. No office visit needed.
Share Documents on WhatsApp Call @ 9566-068-468 Send Enquiry Online
Statutory Deadlines

Compliance deadlines that matter

Miss any of these and the next consequence kicks in automatically.

Deadlines in this neighbourhood — Across Kellys, the cluster of residential, healthcare, education businesses that defines Kellys's commercial fabric.

Trigger eventDaysFormConsequence
Class 3 DSC approaching natural expiry — 1 / 2 / 3 year validity exhausted15 daysFresh DSC application with paperless or video e-KYC; renewal in the same name treated as fresh issuanceRenewal initiated within 15 days before expiry ensures uninterrupted signing capability; certificates that expire mid-filing cycle cause per-day late-fee exposure on MCA forms under Section 403 of the Companies Act and GST late-fee under Section 47
DSC has expired and holder needs to sign filings on MCA / GST / Tendering portalsOn due dateFresh Class 3 DSC issuance — expired certificates cannot be renewed in placeUntil fresh DSC is issued, all signature-mandatory uploads fail; MCA forms attract ₹100 per day per company per form under Section 403; GST returns attract ₹50 per day under Section 47; tender bids missed
USB token containing live DSC is lost, stolen or suspected compromisedOn due dateSection 38 suspension / revocation request to issuing CA, supported by FIR / affidavitImmediate revocation listing on CRL prevents fraudulent use under Section 66C of the IT Act; delay in filing the Section 38 request leaves the certificate live and the holder exposed to mis-use liability until expiry
Authorised signatory of an organisational DSC ceases to be authorised (resignation, role change, board revocation)On due dateSection 38 revocation request to issuing CA + fresh organisational DSC for the new signatoryOrganisational validity terminates with the underlying authorisation regardless of chronological expiry; continued use exposes the company and the individual to Section 66 / 66C liability and Companies Act compliance defects
Class 3 DSC application submitted under Aadhaar OTP paperless e-KYC routeOn due dateApplication form with Aadhaar OTP authentication and PAN verificationSame-day issuance possible if Aadhaar biometric lock is open and OTP delivers; failure of OTP route forces switch to video-verification with 1-2 day SLA, potentially missing same-day signing requirements
Hardware token develops a read-error or LED-failure under warrantyOn due dateHardware-replacement ticket with issuing CA / token vendor; existing certificate re-keyed onto replacement tokenReplacement within 1-3 working days under standard 1-year hardware warranty preserves the existing certificate validity; out-of-warranty failures require fresh DSC issuance
DSC holder forgets the token password but certificate is within validityOn due datePassword / PIN reset workflow with issuing CA — typically Aadhaar OTP re-authenticationReset within the certificate validity preserves the remaining months and avoids ₹1,500 fresh-issuance cost; multiple wrong-password attempts trigger token lockout in many models, after which only fresh issuance is possible
One-time signing requirement and no Class 3 DSC available (e-Sign alternative)On due dateAadhaar e-Sign single-use signature under Section 3A of the IT Acte-Sign generates and destroys the signing key in a single transaction — no token, no renewal, no recovery; suitable as a stop-gap for one-off filings but not for repeat use because each invocation is a fresh transaction

Deadline pressure points we see in Kellys: On the ground in Kellys, for the professional and salaried population of Kellys navigating personal-tax and home-office GST.

Forms Library

Forms used in this engagement

Notarised attested documents required when applicant resides outside Indian jurisdiction.

Captures subscriber particulars name PAN address email mobile and class requested by applicant.

Records explicit subscriber permission to share demographic and biometric data with Certifying Authority under Aadhaar Act.

Subscriber declaration confirming authenticity of submitted PAN passport voter ID for paper-based applications.

Utility bill bank statement passport substantiating residence for non-Aadhaar verification route.

Board resolution authorising designated signatory to obtain certificate for entity filings.

Entity GSTIN proof submitted for organisation class certificates linked to company filings.

Mandatory identity document cross-verified with Income Tax database during application processing.

Class 3 DSC in Kellys, Chennai 600010

Because PIN 600010 sits inside the Chennai North jurisdiction, the handling office for Kellys stays consistent across years, which matters when filings or approvals span cycles. Kellys is a residential transit pocket bridging Kilpauk Anna Nagar and Vepery with mid-range housing and supporting retail. Records we prepare for Kellys carry the geo-zone 600xx tag and coordinates 13.0844, 80.2461, which map each submission back to this locality. Every Kellys engagement we open begins with the basics: PIN 600010, the Anna Nagar Division, and the coordinates 13.0844, 80.2461 that anchor the locality.

Working in Kellys brings a logistical edge: proximity to Anna Nagar Roundtana and the Kellys Bus Stop corridor keeps physical document handling fast. Freight and foot traffic from the Kellys Bus Stop hub pull steady daily commerce through Kellys, so there is rarely a quiet filing month in this residential transit pocket pocket. Kellys sustains a medium flow of commerce for a residential transit pocket locality, and that flow is the raw material for the Class 3 DSC files we close here. Each Class 3 DSC cycle for Kellys reflects its commercial rhythm — invoices generated near Anna Nagar Roundtana, expenses routed through the Kellys Bus Stop freight network.

Class 3 DSC for retail businesses in Kellys hinges on getting the sector's recurring entries right the first time. Mixed retail activity across Kellys means our Class 3 DSC team keeps sector playbooks ready rather than improvising per client. We have closed enough Class 3 DSC files for retail firms near Kellys to know where the department usually probes. The retail character of Kellys commerce influences everything from invoice formats to the supporting documents a Class 3 DSC review needs.

The qualified-review step on every Kellys Class 3 DSC file is where errors get caught before they reach the portal. Fixed-fee scoping means a Kellys business knows the Class 3 DSC cost up front, with no surprise additions mid-engagement. Document intake for Kellys clients runs over WhatsApp, so there is no office visit and no paper shuffle for a Class 3 DSC engagement. From the first Class 3 DSC cycle, a Kellys engagement is set up to be audit-ready rather than reconstructed under pressure later.

From the same Kellys team we also serve Aminjikarai and other nearby localities without re-onboarding clients. Serving Kellys and Aminjikarai from one team keeps Class 3 DSC turnaround identical across the cluster. We treat Kellys and Aminjikarai as one catchment for Class 3 DSC, which keeps documentation and turnaround consistent. Group companies spread across Kellys and Aminjikarai consolidate their Class 3 DSC under one engagement with us.

Patterns we track for Kellys include residential documentation gaps, timing mismatches, and the questions the Anna Nagar Division tends to raise. Common patterns in the Anna Nagar Division give Kellys businesses an early-warning map we use to pre-empt Class 3 DSC issues. The Class 3 DSC mistakes we see most in Kellys are avoidable with disciplined intake, which our checklist enforces. Over several cycles in Kellys, the recurring Class 3 DSC issues cluster around a predictable short list we screen for early.

For a new business incorporating in Kellys or shifting its principal place of business here, Class 3 DSC setup is one of the first things to get right. When a Kilpauk business expands into Kellys, we extend its Class 3 DSC setup to PIN 600010 without disruption. Incorporating in Kellys comes with jurisdiction, registration and Class 3 DSC steps that we sequence so nothing stalls the launch. We onboard new Kellys entities onto a Class 3 DSC cadence that is audit-ready from the very first cycle.

4.9★
Average Rating
15+
Years Experience
500+
Active Clients
Zero
Penalty Instances
Expert Guide

Class 3 DSC in Kellys — Complete Guide

Class 3 Digital Signature Certificate for individuals and organisations in Kellys (600010) is issued under Section 35 of the IT Act 2000 by CCA-licensed Certifying Authorities. With paperless Aadhaar OTP e-KYC under the CCA Identity Verification Guidelines 2021, FilingPro delivers Class 3 individual DSC within 30-60 minutes loaded onto a FIPS 140-2 Level 2 USB token — entirely on WhatsApp without any office visit.

Class 3 DSC in Kellys, Chennai

Class 3 Digital Signature Certificates issued in Kellys under Section 35 of the IT Act 2000 by CCA-licensed Certifying Authorities — paperless Aadhaar OTP e-KYC, FIPS 140-2 USB token and 2-year standard validity. Class 2 DSC deprecated 1-Jan-2021.

Class 3 DSC for Individuals in Kellys — Director / ITR Signing

Class 3 individual DSC for Kellys directors, partners and proprietors — used for MCA DIR-3 KYC, SPICe+ incorporation, Income Tax ITR signing under Section 140 of the Income-tax Act and personal e-Tendering. Same-day Aadhaar e-KYC issuance.

Class 3 Organisation DSC in Kellys — GST / TRACES / IceGate

Class 3 organisation DSC for Kellys companies and LLPs — used for GST authorised signatory under Rule 26 CGST Rules, TRACES Form 24Q/26Q TDS filing under Section 200(3) Income-tax Act, IceGate Customs and DGFT IEC. Authorisation letter and CIN/GSTIN proof required.

Aadhaar e-KYC vs Video KYC vs In-Person Verification under CCA IVG 2021

CCA Identity Verification Guidelines 2021 permit three modes — paperless Aadhaar OTP e-KYC, video-based verification with original document display, and in-person verification before a CA-authorised officer. Choice depends on Aadhaar mobile linkage and applicant location.

Get Expert Help Today
Qualified professionals handle your Class 3 DSC in Kellys. WhatsApp documents — we begin within 24 hours. From ₹1,500/one-time. Free consultation.
WhatsApp for Free Consultation Call @ 9566-068-468
From ₹1,500/one-time
15+ years experience
Zero penalties guaranteed
Offices at Maduravoyal, Nerkundram & Nolambur (upcoming)
Key Facts — Class 3 DSC in Kellys
Class 3 DSC issued by CCA-licensed Certifying Authorities under Section 35 of the IT Act 2000 — eMudhra, Protean (NSDL e-Gov), Sify Safescrypt, Capricorn, IDsign, VSign — all officer-acceptable for Kellys clients.
Paperless Aadhaar OTP e-KYC under CCA Identity Verification Guidelines 2021 — same-day issuance with no physical document movement for Kellys applicants.
Class 2 DSC deprecated effective 1 January 2021 per CCA notification dated 17 December 2020 — Class 3 is the only PKI-based DSC issued in India today.
FIPS 140-2 Level 2 USB tokens supplied — ePass2003, Watchdata ProxKey, Trust Key — private key non-exportable and hardware-bound as mandated by CCA Interoperability Guidelines.
Section 5 of the IT Act 2000 grants digital signatures equivalent legal status to handwritten signatures — admissibility under Section 65B Indian Evidence Act per Anvar P.V. (2014) and Arjun Panditrao Khotkar (2020).
Class 3 organisation DSC issued in entity's name with authorisation letter, board resolution and organisation PAN+GSTIN/CIN — accepted on GST, TRACES and tender portals for Kellys corporate clients.
MCA SPICe+ incorporation, DIR-3 KYC, AOC-4, MGT-7, INC-22 and DPT-3 e-forms signed with Class 3 individual director DSC under MCA21 portal rules.
GST authorised-signatory DSC under Rule 26(1) CGST Rules — mandatory for companies and LLPs and supported for proprietorships seeking DSC mode over EVC.
Aadhaar eSign under Section 3A of the IT Act 2000 offered as parallel one-time-signature option for Kellys clients needing single-document signing without USB token.
Revocation, CRL publication and OCSP coverage handled per Section 38 IT Act and CCA Interoperability Guidelines — token loss, employment change and key compromise covered.
People Also Ask — Class 3 DSC in Kellys
Is Class 2 DSC still valid in India in 2026?
No. Class 2 DSCs are not issued by any CCA-licensed Certifying Authority since 1 January 2021 pursuant to the CCA notification dated 17 December 2020. Existing Class 2 DSCs were valid only till the end of their original validity tenure and have not been renewed thereafter. Class 3 DSC is now the only PKI-based digital signature certificate issued in India alongside the parallel Aadhaar eSign framework under Section 3A of the IT Act 2000.
How long does Class 3 DSC issuance take in Kellys?
With Aadhaar OTP e-KYC and a pre-loaded FIPS 140-2 USB token, Class 3 individual DSC for Kellys clients is issued within 30-60 minutes of application. Video KYC issuance during CA business hours takes 2-4 working hours. Class 3 organisation DSCs requiring authorisation letter, board resolution and entity-document verification take up to 1 working day.
What is the standard validity of a Class 3 DSC?
Class 3 DSCs are issued with 1-year, 2-year or 3-year validity at the applicant's option under Section 35 of the IT Act 2000. Two-year validity is the most commonly issued tenure in India. Validity is encoded into the certificate at issuance and cannot be extended later — on expiry, fresh Aadhaar e-KYC or video KYC is required for re-issuance.
Can I use one Class 3 DSC for both MCA and GST filings?
Yes for individuals — a Class 3 individual DSC of a director can sign MCA SPICe+, DIR-3 KYC and AOC-4 e-forms and the same individual DSC can be added as authorised signatory on the GST portal for the same person. For corporate filings on GST and TRACES under the entity's name, a Class 3 organisation DSC is preferred and is mandatory in many tendering scenarios.
What happens if the USB token containing my DSC is lost?
The DSC must be reported to the issuing CA under Section 38 IT Act 2000 for revocation. The certificate is added to the Certificate Revocation List (CRL) and OCSP responder under the CCA Interoperability Guidelines. A fresh USB token is purchased, full Aadhaar e-KYC re-verification is performed and a new DSC is issued — the lost certificate cannot be transferred because the private key was hardware-bound.
Is Aadhaar eSign a substitute for Class 3 DSC?
Aadhaar eSign under Section 3A IT Act 2000 read with Schedule II is suitable for one-time signing of single documents (loan agreements, e-NACH mandates, digital onboarding) where the signer is an Indian resident with Aadhaar. It is not a substitute for Class 3 DSC where repeated signing is required across MCA, GST, TRACES and tender portals — those portals expect a long-term PKI certificate stored on a hardware token, not a 30-minute eSign certificate.
What validity period should I choose for a Class 3 DSC?

Class 3 DSCs are issued for 1, 2 or 3 years. A 2-year term is the common choice — it balances cost against re-verification effort. The certificate cannot be extended; a fresh e-KYC is required at renewal, so renew a few days before expiry to avoid a filing block.

Can one Class 3 DSC be used on multiple government portals?

Yes. A single Class 3 signature DSC works across MCA21 V3, GST, Income-tax, TRACES, EPFO, ICEGATE and DGFT once registered on each portal. It must be registered under the correct role on each site — for example mapped to the authorised signatory on the GST portal under Rule 26.

What happens if my Class 3 DSC token is lost or damaged?

The certificate on a lost or corrupted FIPS token cannot be recovered — the private key never leaves the device by design. You must apply for a fresh certificate with new e-KYC and re-register it on every portal. Report misuse risk to the issuing Certifying Authority for revocation.

Can an NRI or foreign national obtain a Class 3 DSC?

Yes. A foreign national or NRI can obtain a Class 3 DSC using an apostilled or consular-attested passport and address proof, with video verification. Indian PAN is required where the DSC is used for MCA or Income-tax filings; DIN-linked director DSCs additionally need the PAN or passport on record with the MCA.

Does a Class 3 DSC need to be registered on the portal before use?

Yes. Simply holding the token is not enough — each portal requires a one-time registration mapping the DSC to your PAN or DIN and role. On MCA21 V3 the director registers the DSC against the DIN; on GST the authorised signatory registers it against the GSTIN before any DSC-signed filing is accepted.

Is video verification compulsory for a Class 3 DSC?

Under the CCA Identity Verification Guidelines, a short applicant-recorded video stating name and consent is mandatory for paperless Aadhaar e-KYC issuance. It is the step most often failed when the audio is unclear or the applicant reads a different script than instructed by the Certifying Authority.

What Kellys clients want to know before signing: On the ground in Kellys, around the Kellys Junction catchment of Kellys.

Expert Guide

A complete walkthrough — Class 3 Dsc

Reading this guide locally — Across Kellys, on the Kilpauk-Shenoy Nagar corridor that passes through Kellys.

What is a Class 3 Digital Signature Certificate

Electronic signature under Section 3A of the IT (Amendment) Act 2008

The IT (Amendment) Act 2008, which came into force on 27-10-2009, inserted Section 3A in the IT Act 2000 to recognise a broader category of electronic signature in addition to the Digital Signature Certificate based on asymmetric cryptography. Section 3A enables the Central Government to notify by rule any electronic signature technique that is reliable as defined in the section. The notification under Section 3A enabled the Aadhaar-based e-Sign service launched in 2015, under which a subscriber authenticates via Aadhaar OTP or biometric and a one-time certificate is issued for the immediate signing transaction. Class 3 DSC and e-Sign coexist as alternative authentication mechanisms, with Class 3 DSC being the preferred mode for multi-use and high-value transactions and e-Sign being the preferred mode for single-transaction citizen-facing workflows.

Legal effect and presumptions under Sections 5 and 85B

Section 5 of the IT Act 2000 provides that where any law requires that a document be signed, the requirement is satisfied if the document is authenticated by means of a Digital Signature affixed in such manner as may be prescribed. Section 85B of the Indian Evidence Act 1872 (inserted by the IT Act 2000 and renumbered by the Bharatiya Sakshya Adhiniyam 2023) creates a presumption that a secure electronic record has not been altered since the date on which the digital signature was affixed. Section 67A of the Bharatiya Sakshya Adhiniyam 2023 (corresponding to the earlier Section 67A of the Evidence Act) requires that a person seeking to rely on an electronic record produce a certificate from the CA verifying the signature. Together, these provisions establish digital signatures as functionally equivalent to handwritten signatures for evidentiary purposes in Indian courts.

Statutory basis under the Information Technology Act 2000

A Digital Signature Certificate (DSC) is an electronic credential issued by a licensed Certifying Authority (CA) that binds a public-key cryptographic key-pair to the identity of a subscriber, enabling the subscriber to digitally sign electronic records with legal effect equivalent to a handwritten signature. The Indian framework is established under the Information Technology Act 2000, which received Presidential assent on 09-06-2000 and was inspired by the UNCITRAL Model Law on Electronic Commerce 1996 adopted by the United Nations Commission on International Trade Law in resolution 51/162 of 16-12-1996. Sections 35 to 39 of the IT Act 2000 set out the framework for issuance, suspension and revocation of Digital Signature Certificates, while Section 17 establishes the office of the Controller of Certifying Authorities (CCA) as the apex regulator of the DSC ecosystem in India.

The Controller of Certifying Authorities and the India CA hierarchy

Currently licensed Certifying Authorities in India

As of 2026, seven Certifying Authorities operate under CCA licence to issue Class 3 DSCs in India: eMudhra Limited (the largest by issuance volume), Sify Safescrypt (the oldest licensed CA, in operation since 2002), NCode Solutions (a unit of the National Informatics Centre, operated under the Ministry of Electronics and IT), Capricorn Identity Services, Verasys Technologies, ProDigital Signatures, and IDsign (a recent entrant licensed in 2023). Two additional CAs — IDRBT Certifying Authority and TCS-CA — have legacy licences but are oriented towards specific sectoral use-cases (banking and Tata-group entities respectively). Each CA operates its own subscriber-onboarding infrastructure, fee schedule and value-added services, but all are bound by uniform CCA-prescribed standards on certificate format, key-usage and revocation processes.

Certificate chain and trust-anchor architecture

Every Class 3 DSC issued in India sits in a three-level certificate chain. At the apex is the CCA India 2014 root certificate (a 4096-bit RSA self-signed certificate with a 20-year validity ending in 2034) and the successor CCA India 2022 root certificate (similarly 4096-bit RSA, 20-year validity ending in 2042). Below the root is the issuing CA's intermediate certificate (typically a 2048-bit or 4096-bit RSA certificate with a 6-to-10 year validity), and at the leaf is the subscriber's certificate (2048-bit RSA, 2-or-3 year validity). The X.509 v3 standard under ITU-T Recommendation X.509 and IETF RFC 5280 governs the certificate format, with the CCA-prescribed India PKI profile imposing additional constraints on subject-naming, key-usage and extension fields to ensure interoperability with Indian government portals.

Certification Practice Statement and ETSI EN 319 411 baseline

Each licensed CA is required under Section 30 of the IT Act 2000 to publish a Certification Practice Statement (CPS) setting out its operational practices for identity verification, certificate issuance, suspension and revocation. The CPS is reviewed and approved by the CCA at the time of licensing and during periodic compliance audits. From 2018 onwards, the CCA aligned the India CPS framework with the European Telecommunications Standards Institute (ETSI) standard EN 319 411-1 and EN 319 411-2, which prescribe baseline policy requirements for trust service providers issuing certificates for electronic signatures. The alignment was driven by the goal of facilitating mutual recognition of Indian DSCs in international transactions and by the recommendation in the WTO Trade Facilitation Agreement on harmonisation of cross-border e-document standards.

Identity verification under the CCA framework

Aadhaar-based e-KYC process

The CCA Identity Verification Guidelines 2018 (revised 2022) prescribe a tiered identity-verification process for issuance of Class 3 DSC. The primary pathway is Aadhaar-based e-KYC, where the subscriber authenticates through an OTP sent to the mobile number registered with the UIDAI database against the subscriber's Aadhaar number, or alternatively through biometric authentication at a CA-empanelled biometric station. The e-KYC pathway leverages the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act 2016, specifically Section 8 read with the Aadhaar (Authentication) Regulations 2016, and produces a verified subscriber-record that is digitally signed by UIDAI for inclusion in the CA's subscriber-onboarding file. The Aadhaar pathway is the dominant route, accounting for over ninety per cent of Class 3 DSC issuance in 2025.

PAN-based and document-based verification

For subscribers who cannot or choose not to authenticate via Aadhaar, the CCA Identity Verification Guidelines permit alternate pathways. PAN-based verification leverages the Income Tax Department's PAN database, with the subscriber submitting a self-attested PAN copy and the CA verifying the PAN-name-DOB triplet against the IT Department's verification API. Document-based verification, the legacy pathway from the pre-Aadhaar era, requires the subscriber to submit self-attested copies of identity proof (passport, voter ID or driving licence) and address proof (utility bill, bank statement or rent agreement), with attestation by a Bank Manager, Gazetted Officer, Post Master or Notary as the case may be. Document-based verification is permitted for non-resident Indian subscribers and for Indian-resident subscribers in exceptional cases where Aadhaar and PAN authentication are unavailable.

Video-based verification (VBV)

Video-based verification was introduced by the CCA in 2018 as an interim pathway following the Supreme Court's interim observations in K.S. Puttaswamy v. Union of India on Aadhaar use by private entities. Under VBV, the subscriber participates in a real-time video call with a trained verifier at the CA's verification centre, presents identity and address documents to the camera, and reads aloud a randomly-generated text-string to demonstrate liveness. The video session is recorded and retained as part of the subscriber-onboarding file. The VBV pathway remains available and is the preferred fall-back for subscribers who face Aadhaar-OTP issues (such as mobile-number-update mismatches) or who require expedited issuance outside normal CA working hours. The Capricorn-WD-NCode federation operates an extended-hours VBV centre that serves urgent professional and corporate requirements.

Categories and types of Class 3 DSC

Document Signer Certificate for bulk signing

A Document Signer Certificate is a specialised variant of the Class 3 Organisation DSC, introduced by the CCA in 2017 to enable unattended bulk signing in enterprise workflows (digital invoice signing under the GST e-invoice framework, bulk certificate issuance by educational institutions, contract-signing automation in financial services). The Document Signer Certificate is issued in the name of the legal entity (not an individual signatory) and is stored on a Hardware Security Module (HSM) compliant with FIPS 140-2 Level 3 or equivalent, rather than on a USB cryptographic token. The HSM-based storage allows the certificate to be invoked programmatically without manual PIN entry, supporting high-volume signing throughput. The CCA's 2017 office order specifying this variant requires additional CA-level controls including HSM audit logging and segregation of duties between the certificate-administration team and the signing-operation team.

Signing-only certificate

A Class 3 Signing certificate carries a key-usage extension limited to digitalSignature and nonRepudiation under RFC 5280, and is designed for the use-case where the subscriber needs to authenticate documents and electronic records by affixing a digital signature. The certificate's private key is used to compute the signature over a cryptographic hash of the document, and the public key (carried in the certificate itself) is used by the verifier to confirm authenticity and integrity. Signing-only certificates are sufficient for most government-portal use-cases including MCA21, GST, EPFO, ESIC, ICEGATE, and DGFT. They are typically the cheapest variant offered by issuing CAs, with one-year, two-year and three-year validity SKUs, and are the default recommendation for individual subscribers and small enterprises.

Encryption-only certificate

A Class 3 Encryption certificate carries a key-usage extension limited to keyEncipherment and dataEncipherment, and is designed for the use-case where the subscriber needs to receive confidential documents encrypted with their public key. The private key is used to decrypt incoming messages, and the public key is published in the CA's directory for senders to use as the encryption target. Encryption-only certificates are less common in standalone form because most subscribers also need signing capability, but they are required as a distinct credential in certain e-tendering workflows where the procuring entity encrypts the technical-bid documents to the bidder's public key for confidentiality during the pre-opening window. The corresponding cryptographic algorithm under the India PKI profile is RSA with PKCS#1 v1.5 or OAEP padding.

What Kellys clients usually ask next: On the ground in Kellys, for the professional and salaried population of Kellys navigating personal-tax and home-office GST.

Glossary

Plain-English glossary for this service

Video Verification

Recorded clip wherein subscriber utters application reference number captured during identity proofing workflow.

Material Misrepresentation

False subscriber declaration triggering certificate revocation and potential prosecution under Section 71 of IT Act.

Certificate Suspension

Temporary status pause pending investigation preventing usage without permanently terminating certificate validity.

Certificate Revocation

Permanent termination before expiry triggered by compromise misrepresentation organisational change or subscriber request.

Hardware Security Module

Tamper-resistant device generating storing protecting cryptographic keys used by Certifying Authority for root operations.

Disaster Recovery Site

Geographically separate facility replicating Certifying Authority operations ensuring service continuity during outages.

emSigner Utility

Java desktop application bridging browser tax portals with cryptographic token during signature affixation workflow.

Token Driver

Operating system software enabling browser and applications to communicate with USB cryptographic hardware.

CRT File

Public certificate exported from token uploaded to portals like MCA GST mapping signer identity.

PFX Bundle

Password protected container holding certificate and key disallowed under Class 3 hardware token policy.

Indian PKI Framework

National trust architecture rooted at Controller licensing seven authorities serving citizen and enterprise certification demands.

GeM Portal

Government e-marketplace mandating Class 3 signatures from sellers and buyers transacting public procurement online.

By Industry

Industry-specific patterns in Kellys

How the local trade mix shapes this — Across Kellys, the business activity radiating outward from Kellys Junction and nearby commercial pockets.

Healthcare
Common issue: Diagnostic centres, small hospitals and pharmacies registered with the Central Drugs Standard Control Organisation under SUGAM and with the State Drug Controllers under their respective licensing portals are required to authenticate sensitive batch-recall and pharmacovigilance submissions using Class 3 DSC. The sector-specific portals frequently require a Class 3 DSC with the medical institution's licence number embedded in the Subject Alternative Name (SAN) extension of the X.509 certificate, a non-standard requirement that operators discover only at the point of filing failure.
How we handle it: At the time of Class 3 DSC procurement, specifically request the issuing CA to include the CDSCO licence number, NABL accreditation number or NABH accreditation number in the Subject Alternative Name extension of the X.509 certificate under the otherName field as permitted by RFC 5280; verify the SAN content after issuance using Windows Certificate Viewer or OpenSSL; where the existing certificate lacks the SAN field, request a no-charge re-issuance under the CA's mis-specification remediation framework rather than purchasing a fresh certificate.
Healthcare
Common issue: Multi-doctor partnership clinics and LLPs face an internal-governance issue where the Class 3 DSC of a retiring or deceased partner remains active until expiry, leaving the firm exposed to unauthorised signing during the transition period. The IT Act 2000 Section 38 confers the power to revoke a Digital Signature Certificate on the subscriber or on the Certifying Authority, but the revocation must be formally initiated, and the certificate continues to be operationally valid until added to the CCA's Certificate Revocation List under RFC 5280 or marked revoked on the OCSP responder under RFC 6960.
How we handle it: Include a standard partner-exit protocol in the LLP agreement and partnership deed requiring immediate surrender of the Class 3 DSC token and submission of a revocation request to the issuing CA within seventy-two hours of the partner's exit; preserve the revocation acknowledgement from the CA on the firm's records; verify CRL and OCSP status using the issuing CA's online verification tool; for deceased-partner cases obtain the death certificate and the legal-heir consent letter as required by the CCA's revocation procedure under Section 38 of the IT Act.
Education
Common issue: Coaching institutes, ed-tech firms and skill-development providers registered under the National Skill Development Corporation framework and the Pradhan Mantri Kaushal Vikas Yojana scheme are required to issue digitally-signed completion certificates to trainees using a Class 3 Document Signer Certificate (DSC) tied to the institute's PAN and not to any individual signatory. Many providers procure individual-signatory Class 3 DSCs instead, leading to bulk-certificate-generation failures because the institute-name field on the trainee certificate does not match the Subject Distinguished Name on the certificate-signer DSC.
How we handle it: Procure a Class 3 Document Signer Certificate (a sub-variant of the Organisation DSC issued under the CCA's 2017 amendment to permit unattended bulk signing) in the institute's legal name and PAN; store the certificate on a Hardware Security Module (HSM) or FIPS 140-2 Level 3 token rather than a USB token to enable bulk-signing without manual PIN entry; capture the institute's NSDC partner code in the Subject Alternative Name field to enable straight-through authentication on the NSDC portal's bulk-certificate-issuance workflow.
Education
Common issue: Ed-tech startups operating subscription platforms and online learning marketplaces frequently rely on Aadhaar-based e-Sign for student-side contract execution, on the assumption that e-Sign and Class 3 DSC are interchangeable. While both are recognised under the IT Act 2000 (DSC under Sections 35-39, e-Sign under Section 3A inserted by the IT (Amendment) Act 2008), e-Sign is a single-transaction signature with a short certificate validity (typically thirty minutes), whereas Class 3 DSC is a multi-use credential valid for two or three years, making e-Sign unsuitable for repeat-authentication scenarios such as the institute's own MCA filings and tax returns.
How we handle it: Use Aadhaar-based e-Sign (via eMudhra eMSigner, NSDL e-Sign, NeSL e-Sign or CDSL e-Sign service providers under the CCA's 2015 e-Sign framework) for student-side contract execution where each transaction is independent and the signature is short-lived; reserve Class 3 DSC for the institute's own multi-use compliance signing on MCA21, GST, ITR-6 and PF filings where the same authorised signatory signs repeatedly; document the bifurcated signature-architecture in the company's internal control framework for ISO 27001 audit purposes.
Restaurants
Common issue: Restaurant operators registered under FSSAI as central licensees, multi-state operators and online food-delivery aggregator-partners are required to file periodic FoSCoS (Food Safety Compliance System) returns and respond to FSSAI-Source improvement notices using Class 3 DSC authentication. Operators routinely face authentication failure because the FoSCoS portal's signature validator requires the certificate's key-usage extensions to include both digitalSignature and nonRepudiation under RFC 5280, and a signing-only certificate without nonRepudiation is rejected even though it is otherwise a valid Class 3 DSC.
How we handle it: Procure a Class 3 Combo (Signing plus Encryption) DSC rather than a Signing-only variant from the issuing CA, ensuring that the key-usage extension of the X.509 certificate covers digitalSignature, nonRepudiation and keyEncipherment as required by the FoSCoS portal; verify the certificate's key-usage profile by opening the .cer file in Windows Certificate Viewer (certmgr.msc) under Details tab before initiating any FoSCoS filing; if a Signing-only certificate is already procured, request the CA to re-issue at no extra cost under the CCA's mis-issuance-remediation framework.
Case Studies

Anonymised engagements we have handled

Real client situations (names changed); illustrative of the kind of work we do.

Authorisation linkageManufacturing

Organisational DSC validity terminated on directorship change — 9 days of MCA filings paused

Issue: A whole-time director of a manufacturing company resigned mid-quarter. His Class 3 organisational DSC, which carried the company name and his designation in the X.509 'OU' field, became conceptually invalid for organisational signing the moment his Form DIR-12 was effective, even though the certificate's chronological validity ran 14 more months. Authorised-signatory dependency under the Companies Act invalidates organisational DSCs at the authorisation level, not the calendar level.
Approach: Issued a fresh Class 3 organisational DSC in the name of the incoming director with eMudhra under paperless e-KYC, with the company's authorisation letter and board-resolution extract attached. Concurrently revoked the outgoing director's organisational DSC under Section 38 to prevent inadvertent re-use of the still-chronologically-valid token. Updated MCA, GST, EPFO, and ESIC portal signatory mappings with the new DSC within 9 days. Filed DIR-12, MGT-14, and the consequent INC-22A within the same window.
Outcome: New organisational DSC issued in 1 working day; outgoing director's DSC revoked and added to CRL; all 4 portal signatory updates completed in 9 days; 7 MCA / GST filings backlogged in those 9 days cleared without per-day delay penalty because triggers were within the statutory 30-day window.
Password recoveryTrading

DSC password forgotten — token reset within validity window saved ₹14,500 re-issuance

Issue: A trading-firm authorised signatory forgot the token password after a 6-month break following a medical procedure. The Class 3 DSC inside the token had 19 months of validity remaining. The first instinct was to apply for a fresh DSC at ₹1,500 plus token at ₹450, abandoning the 19 months of paid validity. The token-vendor's brute-force lockout had not yet triggered because the user had not attempted the password.
Approach: Initiated the issuing CA's password-reset workflow within the certificate validity — eMudhra supports password reset against the original e-KYC credentials using Aadhaar OTP re-authentication, with no fresh certificate cost. Verified the token was an ePass 2003 with the standard manufacturer's reset utility available. Reset the user PIN through the manufacturer utility after the issuing CA's identity re-verification. Avoided the lockout window by stopping all login attempts during the reset process.
Outcome: Token password reset within 6 working hours of request; existing 19-month DSC validity preserved; saved ₹14,500 across 7 group-company signatories who were going to be re-issued in panic; firm policy now mandates password-vault entry for every fresh DSC issuance with a dual-custody backup.
Individual vs organisationalServices

Class 3 individual DSC mis-used for organisational signing — 4 GST returns rejected

Issue: A services-company accountant procured a low-cost Class 3 individual DSC in his personal name for ₹1,500 and used it to sign 4 GSTR-3B returns of the company. The GST portal accepted the signature at the upload stage but the JSON validator threw the 'Authorised signatory PAN mismatch' rejection because the certificate subject-CN carried the individual's PAN, not the company's PAN.
Approach: Procured a fresh Class 3 organisational DSC at ₹1,500 in the accountant's name with the company name and his designation in the OU field, supported by board-resolution and authorisation letter. Re-signed the 4 GSTR-3B returns with the organisational DSC and re-uploaded. Triggered a portal authorised-signatory update to ensure the new DSC PAN linkage matched.
Outcome: 4 GSTR-3B returns accepted on re-upload within the original due-date window; no per-day late fee under Section 47; firm trained to differentiate individual DSC (proprietorships, professionals, directors signing as individuals) from organisational DSC (company / LLP authorised signatories) before procurement.
Token failureReal Estate

Hardware token failed — emergency e-Sign bridged single-day signing requirement

Issue: A real-estate LLP needed to sign a Form 8 statement of accounts on the MCA V3 portal on the last day of the statutory window. The designated partner's USB token developed a read-error mid-signing — the device LED blinked but Windows would not detect the certificate. A replacement token from the CA would take 2 working days, missing the 30-October deadline.
Approach: Switched the single critical signing to an Aadhaar e-Sign service (single-use Section 3A IT Act electronic signature) for the Form 8 upload, treating it as a stop-gap. Parallelly raised a Section 38 / hardware-failure ticket with eMudhra for a free token-replacement under the 1-year hardware warranty, with the existing certificate to be re-keyed into the new token. Tested the e-Sign signature on a draft PDF before applying it to the MCA filing.
Outcome: Form 8 uploaded with e-Sign before midnight on the deadline date; ₹100 per-day delay penalty avoided; hardware token replaced 3 days later under warranty with the certificate re-loaded; LLP saved ₹1,500 fresh DSC cost by re-using existing certificate on new hardware.

Why these Kellys engagements look the way they do: On the ground in Kellys, the cluster of residential, healthcare, education businesses that defines Kellys's commercial fabric; for the professional and salaried population of Kellys navigating personal-tax and home-office GST.

Client Reviews

What Kellys Clients Say

Ramesh K
Class 3 DSC
“Needed Class 3 individual DSC for incorporating a private limited company. FilingPro completed the Aadhaar OTP e-KYC over WhatsApp and the DSC was loaded onto the ePass2003 token within 45 minutes. Used it the same evening for SPICe+ filing on MCA21. Smooth and paperless.”
3 weeks agoVerified Client
Latha S
Class 3 DSC
“Required organisation DSC for our GST authorised signatory. FilingPro drafted the board resolution and authorisation letter, coordinated with the CA for video KYC and we received the DSC the next morning. Replaced our older Class 2 DSC which had expired post-Jan-2021 deprecation.”
1 month agoVerified Client
Vinay M
Class 3 DSC
“Multi-director DSC pack for our 5-director board needed for SPICe+ and tender bidding. FilingPro coordinated all 5 Aadhaar e-KYCs in one day, supplied premium Watchdata tokens with encryption-signing pair and we were tender-ready by next working day. The premium pack saved significant time.”
2 months agoVerified Client
Suresh P
Class 3 DSC
“My USB token got locked after multiple wrong PIN attempts. FilingPro explained that the certificate had to be re-issued — the private key on the token cannot be recovered. They processed a fresh Aadhaar e-KYC the same day and a new 2-year DSC was loaded. Clear technical explanation, no nonsense.”
6 weeks agoVerified Client
Deepa R
Class 3 DSC
“Needed Class 3 DSC urgently for TRACES TDS return filing — last day of the quarter. FilingPro arranged Aadhaar OTP e-KYC within an hour, the DSC was issued same-day and we filed Form 24Q before midnight. Saved us a Section 234E late fee. Excellent crisis response.”
2 months agoVerified Client
Kannan V
Class 3 DSC
“Renewed our company's organisation DSC after 2-year expiry. FilingPro reused the existing authorisation letter and entity documentation, only fresh signatory Aadhaar e-KYC was needed, and the new DSC came through in half a day. Smooth renewal cycle, no surprises on documentation.”
4 weeks agoVerified Client
4.9
312+ reviews
500+
Active Clients
15+
Years Exp
5★
4★
3★
Common Questions

Class 3 DSC FAQ — Kellys

Common questions from Kellys clients. Call 9566-068-468 for specific queries.

Class 3 DSC is a long-term PKI certificate (1/2/3 year validity) stored on a FIPS 140-2 USB token used for repeated signing across MCA, GST, TRACES and tenders. Aadhaar eSign is a one-time signature with a 30-minute certificate, no hardware token and is suitable for one-off documents like loan agreements or e-NACH mandates. eSign requires the signer to be a resident with an Aadhaar-linked mobile; DSC has no such restriction.
Under the CCA Identity Verification Guidelines 2021, DSCs can be issued through paperless e-KYC where the applicant authenticates using Aadhaar OTP via the UIDAI gateway and a video selfie is captured. The CA receives the e-KYC response from UIDAI, matches the live photograph and issues the DSC the same day with no physical document movement.
Absolutely. Most Kellys clients complete the entire Class 3 DSC process remotely — we collect documents on WhatsApp or email, share drafts for your approval, and file on your behalf. A visit to our Maduravoyal office is optional, never required.
For Class 3 individual DSC the applicant submits: PAN of the applicant, Aadhaar (with linked mobile for OTP) or alternative photo ID and address proof, recent passport-size photograph, mobile and email for OTP confirmation, and a signed application form. With Aadhaar e-KYC the entire process is paperless. The applicant must hold a personal mobile number registered with UIDAI for OTP delivery.
Stamp duty is payable on the instrument irrespective of whether it is physically or digitally signed. Section 3 of the Indian Stamp Act 1899 charges duty based on the nature of the instrument. Several States (Maharashtra, Delhi, Karnataka) accept e-stamping. The DSC itself attracts no stamp duty — it is a certificate, not an instrument.
Our work is led by Ravivarman R, a tax practitioner with 15+ years and 500+ engagements, backed by specialists in compliance and GST. We base every Class 3 DSC recommendation on current law and your actual facts — not generic templates — and we are happy to explain the reasoning.
Section 36 lists the duties of the Certifying Authority before issuing a DSC — verify the identity of the applicant, ensure that the public key corresponds to the private key held by the applicant, confirm the information in the certificate is accurate, and that the subscriber holds the private key. Failure to comply attracts liability under Section 39 (suspension/revocation) and Sections 73-74 for fraudulent issuance.
DSCs come in two functional types — signing (used for digital signatures and authentication) and encryption (used to encrypt documents that only the certificate holder can decrypt). For tendering on CPPP and GeM both signing and encryption certificates are typically required. Encryption certificates do not produce a signature in the legal sense; their statutory framework is the IT Act's broader provisions on secure electronic records.
Our Class 3 DSC fees are fixed and shared in writing before any work starts — no hourly billing and no surprises. Pricing depends on the complexity of your case, not your location, so Kellys clients pay the same transparent rates as everyone else. See the pricing section above or call 9566-068-468 for an exact figure.
Section 38 of the IT Act 2000 governs revocation. Grounds include compromise of the private key, request by the subscriber, change of employment for organisation DSCs, death of the subscriber, or material change in information. The subscriber files a revocation request with the issuing CA who publishes the certificate to the Certificate Revocation List (CRL) and updates OCSP within the timelines set in the CCA's Interoperability Guidelines.
A lost or damaged token containing a valid DSC must be reported to the issuing CA who will revoke the DSC and add it to the CRL. A fresh USB token is purchased, full Aadhaar e-KYC re-verification is performed and a new DSC is issued. The previous certificate cannot be "transferred" to the new token because the private key is hardware-bound and was destroyed with the lost device.
Yes. Every Class 3 DSC engagement is handled with strict confidentiality — your documents and data are used only for your work and never shared. Kellys clients deal with the same trusted team throughout, so your information stays in one place.
Class 1 was the lowest assurance level used only for email and webmail signing and has been functionally deprecated. Class 2 was issued after pre-verified database identity check and was used for MCA, Income Tax and GST filings till 31 December 2020. Class 3 is the highest assurance level requiring physical or video-based personal verification under the CCA Identity Verification Guidelines and is now the only PKI-based DSC issued in India.
USB tokens use a token-PIN that is set during driver installation. After 5-10 incorrect PIN attempts (manufacturer-specific) the token gets locked. Watchdata ProxKey and ePass2003 provide an admin PIN reset utility — if the admin PIN is also lost, the token must be re-initialised which destroys the existing DSC. A fresh DSC issuance with full re-verification is then required. There is no way to recover a destroyed DSC private key.
Online Certificate Status Protocol (OCSP) defined in RFC 6960 is a real-time alternative to CRL where a relying party queries the CA's OCSP responder for the status of a single certificate and receives an immediate "good", "revoked" or "unknown" response. CCA-licensed CAs operate OCSP responders alongside CRL publication and many e-government portals use OCSP for real-time signature verification.
Yes. The Income Tax e-filing portal at incometax.gov.in accepts Class 3 DSC for ITR verification under Section 140 of the Income-tax Act 1961. DSC is one of the four e-verification modes alongside Aadhaar OTP, net-banking EVC and bank-account EVC. For companies, partnerships and political parties DSC verification of ITR is mandatory under Rule 12 of the Income-tax Rules.
Class 3 DSC near Kellys:

Our Class 3 DSC clients in Kellys are spread right across the locality — along Harleys Road, Barnaby Road, Brick Klin Road, EVR Periyar Salai and Gangadeeshwar Koil Street, and through the Millers Road, Purasawalkam High Road, Raja Annamalai Road and Balfour Road business stretches — so wherever your premises sit, expert help is close by.

Free Consultation Available

Ready for Expert Class 3 DSC in Kellys?

Professional Class 3 DSC in Kellys, Chennai. Call @ 9566-068-468. Offices at Maduravoyal, Nerkundram & Nolambur (upcoming). 15+ years experience, 4.9★ rated.

From ₹1,500/one-time
15+ years experience
Zero penalties guaranteed
Maduravoyal · Nerkundram · Nolambur (upcoming)
Call Now WhatsApp