the cluster of hospitality, healthcare, banking businesses that defines Thousand Lights's commercial fabric — backed by a 15+ year track record
Handling Class 3 DSC for Thousand Lights and Nungambakkam clients by qualified experts with a 15+ year, zero-penalty record. Call 9566-068-468.
A digitally signed electronic record is admissible in evidence under Section 65B of the Indian Evidence Act 1872 read with Section 5 of the IT Act 2000. The Supreme Court in Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473 held that a Section 65B(4) certificate is mandatory for electronic records, and in Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020) 7 SCC 1 reaffirmed the mandatory nature of the certificate, overruling Shafhi Mohammad.
Fixed fees · Zero hidden charges · Call 9566-068-468 for a custom quote.
Swipe to see all plans
Prices exclude GST. For enterprise pricing, call 9566-068-468.
Expert Class 3 DSC in Thousand Lights — qualified professionals, 15+ years experience, zero-penalty track record.
For Thousand Lights companies needing the full board's DSCs (Premium plan — 5 directors), FilingPro coordinates all five Aadhaar e-KYCs sequentially in a single working day with USB tokens preloaded and shipped together.
e-Tendering on CPPP, GeM and State portals frequently requires both signing and encryption certificates. FilingPro supplies the certificate pair on Premium plan with proper key-usage extensions configured per CCA Interoperability Guidelines.
On token loss, employment change or key compromise, FilingPro coordinates revocation under Section 38 IT Act with the issuing CA — the certificate is added to the CRL and OCSP responder under the CCA Interoperability Guidelines, protecting Thousand Lights clients from misuse liability.
EmSigner
Where a Thousand Lights client only needs to sign one document (loan agreement, NACH mandate, single offer letter), FilingPro recommends Aadhaar eSign under Section 3A IT Act with Schedule II — saves the cost and inventory of a USB token.
Aadhaar OTP, video selfie and document submission all flow through WhatsApp and the CA's e-KYC portal. Thousand Lights clients receive the USB token by courier, never visit our or the CA's office.
Every Class 3 DSC engagement delivers measurable, guaranteed outcomes — expert professionals, on time, every time.
Why this matters here — Across Thousand Lights, the business activity radiating outward from Thousand Lights Mosque and nearby commercial pockets. Practitioners note that with quick access via Thousand Lights Bus Stop and feeder routes connecting Thousand Lights to the rest of Chennai.
Share documents via WhatsApp to 9566-068-468. No office visit required for Thousand Lights clients.
Miss any of these and the next consequence kicks in automatically.
Deadlines in this neighbourhood — Across Thousand Lights, the cluster of hospitality, healthcare, banking businesses that defines Thousand Lights's commercial fabric.
Deadline pressure points we see in Thousand Lights: Where Thousand Lights differs: for Thousand Lights IT-services firms managing export-LUT cycles alongside payroll and TDS.
Captures subscriber particulars name PAN address email mobile and class requested by applicant.
Records explicit subscriber permission to share demographic and biometric data with Certifying Authority under Aadhaar Act.
Subscriber declaration confirming authenticity of submitted PAN passport voter ID for paper-based applications.
Utility bill bank statement passport substantiating residence for non-Aadhaar verification route.
Board resolution authorising designated signatory to obtain certificate for entity filings.
Entity GSTIN proof submitted for organisation class certificates linked to company filings.
Mandatory identity document cross-verified with Income Tax database during application processing.
Recent colour photograph affixed on physical application or uploaded for digital workflow.
Thousand Lights (PIN 600006) falls under the Mylapore Division of the Chennai South, the jurisdiction that handles statutory matters for businesses at this PIN. For Class 3 DSC at PIN 600006, understanding the Mylapore Division's documentation norms removes most of the friction from the process. Because PIN 600006 sits inside the Chennai South jurisdiction, the handling office for Thousand Lights stays consistent across years, which matters when filings or approvals span cycles. The 600xx geo-zone covering Thousand Lights groups several locality clusters under common administration, keeping documentation expectations predictable.
Most commerce in Thousand Lights — invoices, expenses, purchases and statutory records — eventually surfaces in the Class 3 DSC working file we maintain for clients here. Each Class 3 DSC cycle for Thousand Lights reflects its commercial rhythm — invoices generated near Thousand Lights Mosque, expenses routed through the Thousand Lights Bus Stop freight network. Freight and foot traffic from the Thousand Lights Bus Stop hub pull steady daily commerce through Thousand Lights, so there is rarely a quiet filing month in this central business and hospitality area pocket. The businesses clustered around Thousand Lights Mosque in Thousand Lights drive the bulk of the Class 3 DSC workload we see each cycle.
We have closed enough Class 3 DSC files for retail firms near Thousand Lights to know where the department usually probes. Sector concentration matters: when Thousand Lights leans toward retail, the Class 3 DSC risks cluster around the same few line items each cycle. The business mix in Thousand Lights centres on retail, and that sector carries its own Class 3 DSC quirks we plan for in advance. The retail firms we serve in Thousand Lights value a Class 3 DSC partner who already understands their sector's compliance rhythm.
Every Class 3 DSC file we open for Thousand Lights is reconciled, reviewed by a qualified practitioner, and archived for seven years. Working papers for Thousand Lights Class 3 DSC engagements stay archived and retrievable, which makes any later notice or query straightforward to answer. Document intake for Thousand Lights clients runs over WhatsApp, so there is no office visit and no paper shuffle for a Class 3 DSC engagement. A Thousand Lights client sees the same Class 3 DSC cadence each cycle: intake, reconciliation, review, filing, acknowledgement.
We treat Thousand Lights and Royapettah as one catchment for Class 3 DSC, which keeps documentation and turnaround consistent. Coverage from Thousand Lights naturally extends to Royapettah, so group entities across the area share one Class 3 DSC workflow. Businesses straddling Thousand Lights and Royapettah get a single Class 3 DSC point of contact rather than two. A client relocating between Thousand Lights and Royapettah keeps the same Class 3 DSC file and the same team.
The longer we serve Thousand Lights, the more precisely we predict where a Class 3 DSC file needs attention. Common patterns in the Mylapore Division give Thousand Lights businesses an early-warning map we use to pre-empt Class 3 DSC issues. Patterns we track for Thousand Lights include hospitality documentation gaps, timing mismatches, and the questions the Mylapore Division tends to raise. Recurring gaps in Thousand Lights hospitality records are the first thing our Class 3 DSC review closes out.
Shifting principal place of business to Thousand Lights means updating jurisdiction to the Chennai South, and we manage the paperwork end-to-end. A startup setting up near Apollo Hospital Sentinel Tower in Thousand Lights gets a Class 3 DSC foundation built for the Mylapore Division from day one. Incorporating in Thousand Lights comes with jurisdiction, registration and Class 3 DSC steps that we sequence so nothing stalls the launch. New retail ventures in Thousand Lights lean on us to stand up Class 3 DSC correctly before the first deadline rather than after a notice.
Class 3 Digital Signature Certificates issued in Thousand Lights under Section 35 of the IT Act 2000 by CCA-licensed Certifying Authorities — paperless Aadhaar OTP e-KYC, FIPS 140-2 USB token and 2-year standard validity. Class 2 DSC deprecated 1-Jan-2021.
Class 3 individual DSC for Thousand Lights directors, partners and proprietors — used for MCA DIR-3 KYC, SPICe+ incorporation, Income Tax ITR signing under Section 140 of the Income-tax Act and personal e-Tendering. Same-day Aadhaar e-KYC issuance.
Class 3 organisation DSC for Thousand Lights companies and LLPs — used for GST authorised signatory under Rule 26 CGST Rules, TRACES Form 24Q/26Q TDS filing under Section 200(3) Income-tax Act, IceGate Customs and DGFT IEC. Authorisation letter and CIN/GSTIN proof required.
CCA Identity Verification Guidelines 2021 permit three modes — paperless Aadhaar OTP e-KYC, video-based verification with original document display, and in-person verification before a CA-authorised officer. Choice depends on Aadhaar mobile linkage and applicant location.
With Aadhaar-based paperless e-KYC and video verification, a Class 3 DSC is typically issued the same working day. Delays arise only when the mobile number is not linked to Aadhaar or the applicant's name mismatches between PAN and Aadhaar.
For Aadhaar e-KYC: PAN, Aadhaar-linked mobile for OTP, a passport-size photo and a short video verification. For paper-based KYC: self-attested PAN and address proof attested by a gazetted officer or banker. The applicant's mobile and email must be their own.
A Class 3 signature DSC costs approximately ₹1,200–₹1,500 one-time for a 2-year certificate including the FIPS 140-2 Level 2 USB token, Aadhaar e-KYC and video verification. A combo (sign + encrypt) DSC costs approximately ₹1,800–₹2,500 for the same term.
Class 3 DSCs are issued for 1, 2 or 3 years. A 2-year term is the common choice — it balances cost against re-verification effort. The certificate cannot be extended; a fresh e-KYC is required at renewal, so renew a few days before expiry to avoid a filing block.
Yes. A single Class 3 signature DSC works across MCA21 V3, GST, Income-tax, TRACES, EPFO, ICEGATE and DGFT once registered on each portal. It must be registered under the correct role on each site — for example mapped to the authorised signatory on the GST portal under Rule 26.
The certificate on a lost or corrupted FIPS token cannot be recovered — the private key never leaves the device by design. You must apply for a fresh certificate with new e-KYC and re-register it on every portal. Report misuse risk to the issuing Certifying Authority for revocation.
What Thousand Lights clients want to know before signing: Where Thousand Lights differs: around the Thousand Lights Mosque catchment of Thousand Lights.
Reading this guide locally — Across Thousand Lights, in the central business and hospitality area micro-market of Thousand Lights.
A Digital Signature Certificate (DSC) is an electronic credential issued by a licensed Certifying Authority (CA) that binds a public-key cryptographic key-pair to the identity of a subscriber, enabling the subscriber to digitally sign electronic records with legal effect equivalent to a handwritten signature. The Indian framework is established under the Information Technology Act 2000, which received Presidential assent on 09-06-2000 and was inspired by the UNCITRAL Model Law on Electronic Commerce 1996 adopted by the United Nations Commission on International Trade Law in resolution 51/162 of 16-12-1996. Sections 35 to 39 of the IT Act 2000 set out the framework for issuance, suspension and revocation of Digital Signature Certificates, while Section 17 establishes the office of the Controller of Certifying Authorities (CCA) as the apex regulator of the DSC ecosystem in India.
Historically, DSCs were issued in three classes — Class 1, Class 2 and Class 3 — corresponding to progressively higher levels of identity verification. Class 1 was issued on the basis of an email-address verification alone and was suitable for low-value transactions. Class 2 was issued on the basis of identity-document and address-document verification and was the workhorse certificate for income-tax e-filing, MCA21 and most government portals for over a decade. Class 3 has historically required in-person verification or video-verification with biometric authentication and was reserved for high-value transactions such as e-tendering and e-procurement. The CCA's Office Order of 28-12-2020 mandated the discontinuance of Class 2 DSC from 01-01-2021, leaving Class 3 as the single class of DSC for all use-cases. The transition was completed by mid-2021 with the entire ecosystem migrated to Class 3 by issuing CAs.
The IT (Amendment) Act 2008, which came into force on 27-10-2009, inserted Section 3A in the IT Act 2000 to recognise a broader category of electronic signature in addition to the Digital Signature Certificate based on asymmetric cryptography. Section 3A enables the Central Government to notify by rule any electronic signature technique that is reliable as defined in the section. The notification under Section 3A enabled the Aadhaar-based e-Sign service launched in 2015, under which a subscriber authenticates via Aadhaar OTP or biometric and a one-time certificate is issued for the immediate signing transaction. Class 3 DSC and e-Sign coexist as alternative authentication mechanisms, with Class 3 DSC being the preferred mode for multi-use and high-value transactions and e-Sign being the preferred mode for single-transaction citizen-facing workflows.
Class 3 DSC carries an upfront cost typically in the range of ₹1500 to ₹3000 for a two-year individual certificate including the USB token, with Organisation and Combo variants at ₹3000 to ₹6000 and Document Signer Certificate on HSM at ₹15000 to ₹50000 depending on the throughput configuration. Renewal at two-year intervals carries similar costs. Aadhaar e-Sign is priced per transaction, typically ₹5 to ₹25 per signing event depending on the volume tier and the e-Sign Service Provider, with no upfront cost and no hardware procurement. The crossover point between the two cost models is approximately 100 to 200 signing events per year — below which e-Sign is more economical, above which DSC is more economical. The crossover point is reached easily by any active professional or compliance officer but rarely by an individual citizen.
Class 3 DSC and Aadhaar-based e-Sign are both recognised under the IT Act 2000 framework (DSC under Sections 35-39 and Schedule II, e-Sign under Section 3A inserted by the IT (Amendment) Act 2008 and the Rules thereunder) but differ materially in their operating characteristics. A Class 3 DSC is a multi-use credential with a validity of one, two or three years (two years being the most common), allowing the subscriber to use the same certificate for an unlimited number of signing transactions during the validity period. An e-Sign certificate is a single-transaction credential with a validity of approximately thirty minutes, issued just-in-time for a specific signing event and rendered inoperative once the transaction is complete. The reusability difference makes DSC the preferred choice for high-frequency signers and e-Sign the preferred choice for occasional consumer-facing transactions.
Class 3 DSC requires a FIPS 140-2 Level 2 hardware cryptographic token to store the private key, with the token costing approximately ₹500 to ₹1500 in addition to the certificate fee. The token must be physically present at the signing workstation and the user must enter the token PIN to authorise each signing operation, providing a strong two-factor (something-you-have plus something-you-know) authentication model. Aadhaar e-Sign is purely software-based with no hardware token: the signer authenticates via Aadhaar OTP and the certificate-issuance, key-generation, signing and certificate-archival all happen at the e-Sign Service Provider's secure server, with no client-side cryptographic material at any point. The architectural difference makes e-Sign much more accessible (no hardware procurement, no installation) but DSC more secure against server-side compromise scenarios.
A Class 3 DSC's natural validity ends on the notAfter date specified in the certificate (typically two or three years from issuance). The certificate cannot be extended in situ; instead, the subscriber must initiate a re-issuance procedure with the issuing CA at least thirty days before expiry to allow time for re-authentication and token re-flashing. Re-issuance under the CCA Identity Verification Guidelines 2018 requires the subscriber to re-authenticate via Aadhaar OTP (or the alternative pathway used at initial issuance), to confirm or update any subscriber-detail changes since the previous issuance, and to receive the new certificate either on the same physical token (which is re-flashed with the new key-pair) or on a fresh token. The old certificate is either deactivated on its natural expiry or revoked under Section 38 if the re-issuance precedes natural expiry by more than ninety days.
Where any of the subscriber's identifying details captured in the X.509 Subject Distinguished Name changes during the certificate's validity period (change of name on Aadhaar following marriage, change of organisation name following corporate rebranding, change of authorised-signatory designation following internal reorganisation), the existing certificate becomes inconsistent with the underlying subscriber record. The CCA Identity Verification Guidelines require that the subscriber initiate a change-of-particulars request with the issuing CA, leading to revocation of the existing certificate and re-issuance of a fresh certificate with the updated details. The change-of-particulars process is not free: it carries a fee equivalent to fresh issuance, since cryptographically the new certificate is a wholly new key-pair and certificate body rather than an amendment of the existing certificate.
Where the subscriber no longer requires the Class 3 DSC (retirement, change of profession, dissolution of the entity), the subscriber may surrender the certificate to the issuing CA under the Section 38 revocation framework. Surrender is in substance a revocation initiated at the subscriber's request, with no underlying compromise or wrongdoing. The CA processes the surrender, publishes the certificate serial number on the CRL and OCSP responder, and confirms the surrender to the subscriber. Surrender is good operational hygiene because it prevents an inactive certificate from being misused if the physical token falls into unauthorised hands, and it allows the subscriber to maintain a clean record at the CA for any future re-engagement. The token itself can be retained as a physical artifact or destroyed depending on the subscriber's preference.
The launch of MCA21 v3 in 2023 (rolled out in phases beginning January 2023 and completed across all form-categories by mid-2024) brought with it a significant strengthening of the signature-validation logic. The v3 platform replaced the daily-CRL-cache architecture of v2 with real-time OCSP queries for revocation status, replaced the PKCS#7 attached-signature format with the more compact detached-signature format, introduced Subject DN-to-MCA-record reconciliation at the form-validation stage (so that a signature mismatch is flagged immediately rather than at the post-filing review stage), and tightened the supported-CA list to remove certain legacy intermediate certificates. The cumulative effect was to make MCA21 v3 the most signature-stringent of the major Indian government portals, and the platform on which DSC environment-validation matters most.
The Reserve Bank of India's Master Direction on Digital Signing, issued in 2023 and applicable to regulated entities (banks, NBFCs, insurance companies and select fintech firms), codified the sector-specific requirements for Class 3 DSC procurement and use within the financial services sector. The Master Direction mandates Class 3 Combo certificates with FIPS 140-2 Level 2 token storage, requires the certificate's Subject Alternative Name to include the regulated entity's RBI Certificate of Registration number, prescribes a maximum certificate validity of two years (rather than the three-year general maximum) to enforce more frequent re-authentication, and requires the regulated entity to maintain a comprehensive DSC audit trail covering issuance, use, renewal and revocation events. The Master Direction also requires regulated entities to maintain a DSC-incident-response procedure aligned to the broader RBI Cybersecurity Framework.
The CCA's 2022 Cryptographic Guidelines initiated a planned migration from RSA-2048 to RSA-3072 for new subscriber certificates issued from 01-01-2025 onwards, in line with the international cryptographic-strength roadmap published by the US National Institute of Standards and Technology (NIST Special Publication 800-57) and the recommendations of the Brussels-based ENISA on post-quantum-readiness preparatory measures. The 3072-bit RSA key provides approximately 128 bits of equivalent symmetric-cryptographic strength, considered adequate against classical-computing attacks through 2030. The longer-term roadmap contemplates a migration to post-quantum cryptographic algorithms (likely the NIST-standardised CRYSTALS-Dilithium signature scheme) by 2030-2035, with the CCA expected to issue specific transition guidance closer to that timeline as the post-quantum cryptography standards mature into deployable implementations.
What Thousand Lights clients usually ask next: Where Thousand Lights differs: for Thousand Lights IT-services firms managing export-LUT cycles alongside payroll and TDS.
Issuance route for a Class 3 DSC where the applicant records a short verification video reading an OTP and displaying PAN and Aadhaar documents. Used when Aadhaar OTP route is unavailable due to biometric lock, mobile-number mismatch or NRI status. Standard SLA is 1-2 working days and is the only route available for many organisational and NRI applications.
Cryptographic hardware token compliant with the United States National Institute of Standards Federal Information Processing Standard 140-2, Security Level 2. The CCA mandates that all Class 3 DSCs be stored on a FIPS 140-2 Level 2 (or higher) certified hardware token. The private key never leaves the token and signing operations are performed inside the token's secure element.
A widely used FIPS 140-2 Level 2 USB cryptographic token manufactured by Feitian, sold in India as ePass 2003 and ePass 2003 Auto. Compatible with all major Indian Certifying Authorities and supports the standard PKCS#11 interface used by browser plug-ins and signing utilities on MCA, GST and IT portals.
A FIPS 140-2 Level 2 USB cryptographic token sold primarily by eMudhra-affiliated channels. Functionally equivalent to ePass and ProxKey for Indian DSC use; users select between models based on price, channel availability and driver compatibility with the workstation operating system.
A FIPS 140-2 Level 2 USB cryptographic token from Watchdata, commonly bundled with Capricorn and Sify DSC issuances. Like ePass and MTok, ProxKey carries the holder's signing certificate and optional encryption certificate, and uses PKCS#11 for portal-side integration.
Synonym for a physical FIPS 140-2 Level 2 USB cryptographic device that holds the Class 3 DSC. Contrasted with a soft token (file-based PKCS#12 store) which is not permitted for Class 3 by the CCA — soft tokens were the norm for retired Class 1 and Class 2 DSCs.
A file-based cryptographic credential store (typically a PKCS#12 .pfx file) where the private key is encrypted under a passphrase but stored on the workstation file system. Not permitted by the CCA for Class 3 DSC issuance after the 2021 class-retirement. Still encountered in legacy SSL client-authentication and obsolete Class 2 DSC files.
The International Telecommunication Union standard for the format of public-key certificates, including the subject distinguished name, issuer distinguished name, validity period, public key, key-usage extensions and the issuing CA's digital signature over the certificate. Every Indian Class 3 DSC is an X.509 v3 certificate.
The freely shareable half of an asymmetric cryptographic key pair. In a DSC the public key is embedded in the X.509 certificate and is used by any verifier to validate a digital signature created by the corresponding private key. The public key cannot be used to forge signatures or decrypt data encrypted to it.
The secret half of an asymmetric cryptographic key pair. For Class 3 DSCs the private key is generated inside the FIPS 140-2 Level 2 hardware token and cannot be exported; all signing operations are performed by the token internally. Loss of control of the private key (lost or stolen token) requires immediate Section 38 suspension with the issuing CA.
A digitally signed list, published periodically by every Certifying Authority, of certificates that have been revoked before their natural expiry — due to compromise, loss of token, change of role, or voluntary surrender. Verifiers (MCA, GST, IT portals) check the CRL or query an OCSP responder before accepting a digital signature.
An entity licensed by the Controller of Certifying Authorities under Section 24 of the IT Act 2000 to issue Digital Signature Certificates in India. As of date, the live CAs include eMudhra, Sify Communications, (n)Code Solutions, Capricorn Identity Services, IDSign, Verasys and a handful of others. Each CA's certificates are valid pan-India and across all government portals.
How the local trade mix shapes this — Across Thousand Lights, the business activity radiating outward from Thousand Lights Mosque and nearby commercial pockets.
Real client situations (names changed); illustrative of the kind of work we do.
Why these Thousand Lights engagements look the way they do: Where Thousand Lights differs: the cluster of hospitality, healthcare, banking businesses that defines Thousand Lights's commercial fabric. We see for Thousand Lights IT-services firms managing export-LUT cycles alongside payroll and TDS.
“Needed Class 3 individual DSC for incorporating a private limited company. FilingPro completed the Aadhaar OTP e-KYC over WhatsApp and the DSC was loaded onto the ePass2003 token within 45 minutes. Used it the same evening for SPICe+ filing on MCA21. Smooth and paperless.”
“Required organisation DSC for our GST authorised signatory. FilingPro drafted the board resolution and authorisation letter, coordinated with the CA for video KYC and we received the DSC the next morning. Replaced our older Class 2 DSC which had expired post-Jan-2021 deprecation.”
“Multi-director DSC pack for our 5-director board needed for SPICe+ and tender bidding. FilingPro coordinated all 5 Aadhaar e-KYCs in one day, supplied premium Watchdata tokens with encryption-signing pair and we were tender-ready by next working day. The premium pack saved significant time.”
“My USB token got locked after multiple wrong PIN attempts. FilingPro explained that the certificate had to be re-issued — the private key on the token cannot be recovered. They processed a fresh Aadhaar e-KYC the same day and a new 2-year DSC was loaded. Clear technical explanation, no nonsense.”
“Needed Class 3 DSC urgently for TRACES TDS return filing — last day of the quarter. FilingPro arranged Aadhaar OTP e-KYC within an hour, the DSC was issued same-day and we filed Form 24Q before midnight. Saved us a Section 234E late fee. Excellent crisis response.”
“Renewed our company's organisation DSC after 2-year expiry. FilingPro reused the existing authorisation letter and entity documentation, only fresh signatory Aadhaar e-KYC was needed, and the new DSC came through in half a day. Smooth renewal cycle, no surprises on documentation.”
Common questions from Thousand Lights clients. Call 9566-068-468 for specific queries.
Our Class 3 DSC clients in Thousand Lights are spread right across the locality — along Doctor M.G.R. Salai, Haddows Road, Uttamar Gandhi Salai, Uttamar Gandhi Salai (Nungambakkam High Road) and Avvai Shanmugam Salai, and through the Binny Road, Casa Major Road, College Bridge and College Road business stretches — so wherever your premises sit, expert help is close by.
Professional Class 3 DSC in Thousand Lights, Chennai. Call @ 9566-068-468. Offices at Maduravoyal, Nerkundram & Nolambur (upcoming). 15+ years experience, 4.9★ rated.
FilingPro Chennai — 15+ Years of Expert Tax & Business Consulting. Offices at Maduravoyal, Nerkundram & Nolambur (upcoming), Chennai. Call @ 9566-068-468. Disclaimer: Information on this page is for general guidance only and does not constitute legal, financial or tax advice. Consult a qualified professional for specific advice.