About Company DSC

Company-name DSC for authorized signatory MCA filings ROC compliance and TDS returns. Forms handled: Company DSC, Authorisation letter, Class 3 DSC. Legal basis: IT Act 2000 and MCA filing requirements.

Glossary

Plain-English glossary for this service

Class 3 DSC

The highest assurance class of Digital Signature Certificate under Rule 31 of the IT (CA) Rules 2000, issued upon in-person verification or video-based identification; the only class accepted for company filings on MCA21, GSTN, Income-tax and ICEGATE portals.

Authorisation Letter

Letter on company letterhead, signed by the Board or an authorised director, naming the individual who is empowered to obtain a Class 3 Company DSC and to use it for statutory filings; submitted to the Certifying Authority along with the DSC application.

DSC Token Failure

Operational event in which the USB token storing the private key of the Class 3 Company DSC becomes unreadable, requiring fresh issuance with renewed verification; commonly arises on physical damage or cryptographic firmware obsolescence.

Designation Mismatch

Defect arising where the designation recorded in the Class 3 Company DSC application does not match the designation recorded in MCA, GST or Income-tax records; resolved only through suspension and fresh issuance with updated authorisation letter.

Controller of Certifying Authorities

Statutory regulator appointed under Section 17 of the IT Act 2000 to license and supervise Certifying Authorities, prescribe class-wise standards, and oversee revocation and suspension of DSCs.

RBI/2017-18/82

Reserve Bank of India circular introducing phased implementation of the Legal Entity Identifier; the LEI application and renewal are authenticated by the Class 3 Company DSC of the authorised signatory.

Public Key

Element of the asymmetric key pair listed in the DSC and used by the relying party to verify the digital signature affixed by the corresponding private key of the subscriber.

Aadhaar e-KYC for DSC

Verification pathway by which the authorised signatory's identity is established through Aadhaar-based e-KYC at the time of Class 3 DSC issuance; available to the individual signatory and does not substitute the company-level board authorisation.

DIN

Director Identification Number allotted under Section 153 of the Companies Act 2013 to every individual intending to be appointed as a director; pre-condition for association of a Class 3 Company DSC with a director on MCA21.

Company DSC

A Class 3 Digital Signature Certificate issued by a licensed certifying authority in the name of a company (not an individual). The certificate carries the company's CIN and PAN, is mapped to an authorised signatory under board resolution, and is used to digitally sign MCA21 forms, GST returns, income-tax returns of the company, ICEGATE filings, GeM portal documents, and other portal filings where organisational signing is required.

ICEGATE DSC

Class 3 organisational DSC linked to the IEC profile of the company on the ICEGATE portal; required for signing Bills of Entry, Shipping Bills and refund applications; renewal required on every financial year-end DSC cycle.

In-Person Verification

Physical verification of the authorised signatory by an officer of the Certifying Authority at the time of issuance of a Class 3 DSC, in compliance with Rule 31 of the IT (CA) Rules 2000.

Statutory Basis

Operative provisions cited on this page

Every claim on this page can be traced back to a section or rule below.

Section 3, IT Act 2000Anchor

Authentication of electronic records

Sub-section (1) of Section 3 of the Information Technology Act, 2000 provides that any subscriber may authenticate an electronic record by affixing his digital signature, and sub-section (2) prescribes that such authentication shall be effected by use of asymmetric crypto-system and hash function which envelopes and transforms the initial electronic record into another electronic record. It is to be noted that any document signed by the authorised signatory of a company on behalf of the company is treated as authenticated only where the digital signature is created in the manner so prescribed; this is the parent provision underpinning every MCA21, GSTN, ICEGATE and Income-tax filing made by the company.

View source

Section 3A, IT Act 2000Anchor

Electronic signature

Section 3A, inserted by the Information Technology (Amendment) Act, 2008, recognises electronic signatures as legally valid, provided they are reliable and notified by the Central Government in the Second Schedule. It is to be noted that the DSC issued by a Certifying Authority licensed under Section 24 satisfies the reliability test, and a Class 3 DSC issued in the name of an authorised signatory of the company carries presumption of integrity and identity for purposes of all statutory filings on behalf of the company.

View source

Section 5, IT Act 2000Anchor

Legal recognition of digital signatures

Section 5 provides that where any law requires that information or any other matter shall be authenticated by affixing the signature of any person, such requirement shall, notwithstanding anything contained in such law, be deemed to be satisfied if the information or matter is authenticated by means of a digital signature affixed in such manner as may be prescribed. It is to be noted that this Section is the operative bridge between the Companies Act, the CGST Act, the Income-tax Act and the IT Act, allowing the company's authorised signatory to discharge signature requirements digitally without any separate physical attestation.

View source

Section 35, IT Act 2000Anchor

Issue of Digital Signature Certificate by Certifying Authority

Sub-section (1) of Section 35 provides that any person may make an application to the Certifying Authority for issue of a Digital Signature Certificate. Sub-section (3) requires the Certifying Authority, while issuing such certificate, to be satisfied that the applicant holds the private key corresponding to the public key to be listed in the DSC and that such public key will be used to verify the digital signature affixed by the private key. It is to be noted that the DSC issued in the name of the company's authorised signatory must record the company's name in the organisational field to qualify as a Company DSC.

View source

Section 36, IT Act 2000

Representations upon issuance of Digital Signature Certificate

Section 36 sets out the representations deemed to be made by the Certifying Authority upon issuing a DSC, including that the subscriber holds the private key corresponding to the public key listed in the certificate, that the subscriber's public key and private key constitute a functioning key pair, and that the information contained in the DSC is accurate. It is to be noted that any misstatement by the subscriber in the Class 3 DSC application form, including incorrect particulars of the company or authorised signatory designation, exposes the subscriber to revocation under Section 38 and prosecution under Sections 71 and 73.

View source

Section 38, IT Act 2000

Suspension of Digital Signature Certificate

Section 38 empowers the Certifying Authority to suspend a DSC where it has reason to believe that the certificate should not remain valid, or on a request from the subscriber. It is to be noted that suspension is a frequent operational issue at financial year-end when an authorised signatory of a company is replaced or where the company name changes pursuant to a fresh certificate of incorporation, and the existing Class 3 DSC must be suspended and a fresh DSC obtained for the new signatory to enable continuity of MCA, GST and TDS filings.

View source

Section 39, IT Act 2000

Revocation of Digital Signature Certificate

Section 39 empowers the Certifying Authority to revoke a DSC issued by it on grounds including death of the subscriber, dissolution of the firm or company, or where a material fact represented in the certificate is false or concealed. It is to be noted that on dissolution or striking off of a company under Section 248 of the Companies Act, 2013, the Class 3 DSC issued in the name of the authorised signatory tied to the company must be promptly surrendered for revocation to prevent unauthorised filings being made in the name of the defunct entity.

View source

IT (Certifying Authorities) Rules 2000Anchor

Procedural framework for DSC issuance

The Information Technology (Certifying Authorities) Rules, 2000 framed under Section 87 of the IT Act prescribe the standards for issue, verification and management of Digital Signature Certificates. It is to be noted that Rule 23 requires the Certifying Authority to maintain a Certification Practice Statement, Rule 24 prescribes the contents of the DSC including subscriber name and organisation, and Rule 31 prescribes class-wise assurance levels with Class 3 being the highest used for company filings requiring physical presence verification at the time of issuance.

View source

Forms Library

Forms used in this engagement

Class 3 DSC Application FormApplication for issuance of Class 3 Digital Signature Certificate

Application by an authorised signatory of the company for issuance of a Class 3 organisational DSC carrying the company name in the organisational field

Before commencement of statutory filings or upon expiry of existing DSC Licensed Certifying Authority appointed under Section 24 of the IT Act 2000

Authorisation LetterBoard authorisation for DSC in name of authorised signatory

Letter issued on company letterhead authorising the named individual to obtain a Class 3 Company DSC and to use it for statutory filings on behalf of the company

Concurrent with the DSC application; renewed annually with the DSC Submitted to the Certifying Authority along with DSC application

Board ResolutionBoard resolution appointing authorised signatory for DSC

Resolution of the Board identifying the authorised signatory empowered to obtain and use a Class 3 Company DSC for all statutory filings, including under MCA21, CGST Act, Income-tax Act and Customs Act

Passed before the DSC application is made; refreshed on change of signatory Submitted to the Certifying Authority and retained for production to MCA, GST and Income-tax authorities

DSC Renewal FormApplication for renewal of Class 3 DSC

Application for renewal of an existing Class 3 Company DSC on or before expiry, with fresh organisational and signatory verification

Before expiry of the existing DSC, typically aligned with financial year-end Licensed Certifying Authority

DSC Suspension RequestSubscriber request for suspension of DSC

Request to the Certifying Authority for temporary suspension of the DSC pending change of authorised signatory or change in company particulars

Promptly upon resignation, demerger or pending verification Licensed Certifying Authority

DSC Revocation RequestSubscriber request for revocation of DSC

Permanent revocation of an existing Class 3 Company DSC on death of authorised signatory, dissolution of the company or material misstatement in the certificate

On occurrence of the triggering event Licensed Certifying Authority

MCA21 DSC Association FormDSC registration on MCA21 portal

On-portal association of the issued Class 3 Company DSC with the DIN or PAN of the authorised signatory and with the CIN of the company

Immediately on issuance of the DSC Ministry of Corporate Affairs MCA21 portal

GST DSC RegistrationDSC registration on GST common portal

On-portal registration of the Class 3 Company DSC against the GSTIN and authorised signatory PAN for authentication of returns and applications

Immediately on issuance of the DSC Goods and Services Tax Network

Income-tax DSC Management FormDSC management on Income-tax e-filing portal

Registration of the Class 3 Company DSC against the PAN of the authorised signatory under Section 140(c) for return verification and other filings

Immediately on issuance of the DSC and on change of signatory Income-tax e-filing portal

ICEGATE DSC Linkage FormDSC linkage on ICEGATE for IEC

Association of the Class 3 organisational DSC with the IEC and authorised signatory profile on ICEGATE for Customs filings

On registration of IEC profile and on each DSC renewal ICEGATE, Central Board of Indirect Taxes and Customs

Form INC-32 (SPICe+)Simplified Proforma for Incorporating Company Electronically Plus

Composite incorporation form requiring DSC of every subscriber to the memorandum and of every proposed director of the company

At the time of incorporation Ministry of Corporate Affairs MCA21

Form AOC-4Filing of financial statements with the Registrar

Filing of audited financial statements of the company, signed with the Class 3 DSC of the director and of the auditor

Within 30 days of the annual general meeting Registrar of Companies through MCA21

Statutory Deadlines

Compliance deadlines that matter

Miss any of these and the next consequence kicks in automatically.

Trigger event	Days	Form	Consequence
Incorporation of new company requiring SPICe+ filing	7 days	Class 3 DSC application for each subscriber and director	Inability to upload INC-32 (SPICe+); resubmission and stamp-duty recalculation
Change of authorised signatory on board resolution	15 days	Fresh Class 3 DSC application; DIR-12; Authorisation letter	MCA, GST and ICEGATE filings reject with role-check failure
Annual financial year-end DSC renewal	30 days	DSC renewal application and fresh authorisation letter	Filings rejected; statutory deadlines breached for AOC-4, MGT-7, GSTR-9, TDS Q4
Registration of DSC on MCA21 portal after issuance	7 days	MCA21 DSC association screen	Pre-fill failure on all MCA e-forms
Registration of DSC on GST portal after issuance	7 days	GST DSC emSigner registration screen	Returns submission halts at validation stage
Registration of DSC on Income-tax e-filing portal	7 days	Income-tax DSC management screen	Inability to verify return under Section 140(c)
Registration of DSC on ICEGATE for IEC profile	15 days	ICEGATE DSC linkage screen	Shipping bills and bills of entry cannot be signed
Filing of AOC-4 with audited financial statements	30 days	AOC-4 signed with Class 3 DSC of director and auditor	Per day late fee of Rs 100; additional fees under Section 403
Filing of MGT-7 annual return	60 days	MGT-7 signed with Class 3 DSC of director and PCS or director	Per day late fee of Rs 100; disqualification trigger under Section 164(2)
Filing of quarterly TDS statement by company	31 days	Form 24Q or 26Q signed with Class 3 DSC of principal officer	Late fee under Section 234E and penalty under Section 271H

Comparison

Company DSC vs Director DSC

Aspect	Company DSC	Director DSC
Statutory basis	Class 3 Organisation DSC issued under Section 35 read with Schedule II of the Information Technology Act 2000 and the CCA Interoperability Guidelines 2021 — binds to the company's PAN and the authorised signatory's identity	Class 3 Individual DSC issued under Section 35 of the IT Act 2000 — binds to the director's PAN and DIN under Section 152 of the Companies Act 2013 read with Rule 9 of the Companies (Appointment and Qualification of Directors) Rules 2014
Authorising instrument	Board resolution under Section 179(3) read with Section 161 of the Companies Act 2013 naming the authorised signatory, scope of use and revocation procedure — mandatory attachment for issuance	Director's own Aadhaar e-KYC consent and PAN — no board resolution required since the certificate is issued to the natural person, not the corporate entity
Key holder identity	Subject field carries the company name plus the authorised signatory's name — the human signatory holds the token but signs on behalf of the legal entity under CAT v Yogita Goyal NCLAT principle on corporate authority	Subject field carries only the director's name and DIN — signatures bind the director personally for purposes such as DIR-3 KYC, AOC-4 board-of-director attestation and SPICe+ Part B subscriber sheet
Issuance KYC route	Aadhaar OTP e-KYC of the authorised signatory plus 30-second video verification under CCA IVG 2021 — entirely paperless, certificate live within 30-60 minutes for clean cases	Photo, address proof, identity proof, organisation authorisation letter, attestation by a notary or gazetted officer — 3-7 day issuance timeline, used where Aadhaar e-KYC is unavailable or the signatory is non-resident
Token requirement	Private key generated and stored exclusively on FIPS-140-2 Level 2 certified USB hardware token mandated by CCA IVG 2021 — non-extractable, supports Section 67 IT Act 2000 non-repudiation	Not permitted for Class 3 DSC under CCA IVG 2021 — every legally valid DSC for MCA21, GST, ICEGATE and Income-tax requires a hardware token; software-only certificates are non-compliant
MCA21 V3 mapping	Registered on MCA21 V3 against the company CIN as authorised signatory under Section 21 of the Companies Act 2013 — signs AOC-4, MGT-7 / MGT-7A, MGT-14, STK-2 strike-off and DPT-3 on behalf of the company	Registered on MCA21 V3 against the DIN under Rule 9 — signs DIR-3 KYC, DIR-12, INC-32 SPICe+ subscriber sheet, board-of-director attestation on AOC-4 and director consents under Section 152(5)
GSTN signatory role	Enrolled as authorised signatory on the GST portal under Section 25 of the CGST Act 2017 read with Rule 26 of the CGST Rules — mandatory DSC for companies and LLPs filing GSTR-1, GSTR-3B, GSTR-9 and REG-14 amendments	May be designated as the primary or secondary authorised signatory on the GSTIN — but the legal authority flows from the board resolution; a director-DSC without board mandate cannot validate the GSTN authorisation
Income-tax e-filing	Class 3 Organisation DSC registered on the income-tax e-filing portal as the principal contact and verifier under Rule 12 of the Income-tax Rules 1962 — signs ITR-6, Form 3CD tax-audit report and TDS statements 24Q/26Q via TRACES	Director's Class 3 Individual DSC used for personal ITR (ITR-2/ITR-3), Form 26AS access and SFT-related filings; cannot validate the company's ITR-6 unless registered as principal contact through board mandate
ICEGATE / Customs	Bound to the company's IEC on ICEGATE for shipping bills under Section 50 of the Customs Act 1962, bills of entry under Section 46, bond / BG ledger, AEO documentation and customs-broker filings under CBLR 2018	Not used for ICEGATE filings — Customs requires the certificate tied to the company's IEC, not the director's personal PAN; director-only DSCs are rejected at the IEC-DSC mapping stage
IBC / IRP signing	On commencement of CIRP under Section 14 IBC moratorium the company DSC is suspended and the Insolvency Resolution Professional's individual DSC takes over signing authority under Section 17 of the IBC 2016 read with IBBI (Insolvency Resolution Process for Corporate Persons) Regulations 2016	Director DSCs are inactivated for company filings during moratorium since Section 17(1)(b) vests management with the IRP — but remain valid for director's personal Income-tax and DIR-3 KYC obligations
Renewal cadence	FilingPro anchors renewal to 31-March so the company DSC never expires during AOC-4 / MGT-7A filing season (October-November) — 60-day pre-expiry alerts, re-key issuance without fresh KYC where the DSC is still live	Default vendor practice renews on the anniversary of issuance — risks mid-year expiry during GSTR-9 (31-December) or AOC-4 (180 days from FY-end) windows, causing SRN rejection and ₹500-1,000 fee forfeiture
Evidence value	Presumption of authenticity under Section 85B of the Indian Evidence Act 1872 and admissibility under Section 65B as upheld in Anvar P.V. v P.K. Basheer (2014) 10 SCC 473 and Arjun Panditrao Khotkar (2020) 7 SCC 1 — non-repudiable signature on regulatory filings	No statutory presumption — must be independently proved under Section 67 of the Evidence Act, opening room for dispute on authorship and tampering; not accepted for MCA21, GST, ICEGATE or Income-tax submissions