What is a Digital Signature Certificate?
Digital Signature Certificates (DSC) are the digital equivalent (that is electronic format) of physical or paper certificates. Few Examples of physical certificates are drivers' licenses, passports or membership cards. Certificates serve as proof of identity of an individual for a certain purpose; for example, a driver's license identifies someone who can legally drive in a particular country. Likewise, a digital certificate can be presented electronically to prove one's identity, to access information or services on the Internet or to sign certain documents digitally.
Classes of Certificates
The IT law allows us three Classes of DSC
| Class | User Type | Certificate Type | Certificate Validity | Price | ||
|---|---|---|---|---|---|---|
Class 2 DSC
Class 2 Digital Signature's are used to verify the identity of a person against a pre-verified database. This type of Digital Signature is used for E-filing of documents with the Ministry of Corporate Affairs (MCA) and the Income Tax Department. Class 2 Digital Signatures are issued to a person as an USB token after verifying self-attested copies of identity and address proof. It is Class 2 DSC tokens that are used for Company Registration, LLP Registration, IT return filing, MCA return filing and IE Code Registration.
Class 3 DSC
Class 3 Digital Signature's are the most secure form of Digital Signature Certificate's are used to establish the identity of the signee in e-commerce and e-tendering. For instance, many of the online e-tenders require auction participants to participate in the bidding using a Class 3 Digital Signature to establish their acceptance of the bid electronically. Class 3 DSC can also be used for trademark registration. Class 3 Digital Signatures are issued only after the Registering Authority verifies the identity of the applicant, in-person.
DGFT DSC
DGFT Digital Certification facility offered by us finds extensive usage among Exporters & Importers. Operated under Directorate General of Foreign Trade (DGFT), it is a solution developed for Exporter-Importer community in India that enable them to interact as well as transact with DGFT online with security and confidence.
Validity
Digital Signatures usually come with a validity of one or two years. The validity of the Digital Signature can be renewed once the term of the previous Digital Signature expires
Who Needs a Digital Signature Certificate?
According to the Ministry of Corporate Affairs, every individual that is required to sign manual documents and returns filed with ROC is required to obtain a Digital Signature Certificate (DSC). These include:
- Directors
- Auditors
- Bank Officials - for Registration and Satisfaction of Charges
- Company Secretary - Whether in practice or in job
- E-Filing of Income Tax E-Filing is mandatory for all individuals/professionals having an annual gross receipt of INR 25 Lakhs and above, and for business houses with annual turnover of INR 1 Crore and above.
- E-Tender
- E-Return filing becoming mandatory for Income Tax Assesses with an income of over Rs.5 lakhs per annum, the requirement and prevalence of Digital Signatures
Type of Certificates
Sign
The DSC could only be used for Signing a document. (The most popular Certificate) The most popular usage is signing the PDF file for Tax Returns, MCA and other websites.
Encrypt
The DSC would be used to Encrypt a document, it is popularly used in tender portal, to help your company encrypt the documents and upload. You could also use the certificate to encrypt and send classified information.
We are selling Encrypt certificate as a standalone product as well.
Sign & Encrypt
You could buy both Sign & Encrypt DSC by using this category.
Difference between Encryption and Signing
Message encryption provides confidentiality. Allows users to encrypt document with the public key which can be decrypted only with the corresponding private key. To put it in simple terms when encrypting, you use their public key to write message and recipient uses their private key to read it. One of the most secure way protecting confidential documents.
Message signing binds the identity of the message source to this message. It ensures data integrity, message authentication, and non-repudiation altogether. When signing, you use your private key to write message's signature, and they use your public key to check if it's really yours.
Model of Digital Signature
As mentioned earlier, the digital signature scheme is based on public key cryptography. The model of digital signature scheme is depicted in the following illustration -
- A digital signature is an electronic signature that can be used to authenticate the identity of the sender of a message or the signer of a document, and possibly to ensure that the original content of the message or document that has been sent is unchanged.
Under MCA21 Every person who is required to sign manual documents and returns filed with ROC is required to obtain a Digital Signature Certificate (DSC). Accordingly following have to obtain Digital Signature Certificate:
- 1. Directors
- 2. Auditors
- 3. Company Secretary - Whether in practice or in job.
- 4. Bank Officials - for Registration and Satisfaction of Charges
- 5. Other Authorized Signatories.
Digital Signature Certificate (DSC) is not required by Companies but by individuals. For example the Director or the Company Secretary, signing on behalf of the Company requires a DSC.
No. it is mandatory to have a valid digital signature certificate for e-filing the forms on MCA portal.
No. A DSC is unique to each individual. If a professional has obtained a DSC, he/ she can use the same DSC for e-filing of forms for multiple companies, provided he/ she has been authorized to do so by the respective companies.
If the Company Secretary is an authorized signatory, he/ she is required to obtain a DSC.
Encryption is the transformation of information from readable form into some unreadable form.
No, you cannot. A digital signature certificate can have only one email address.
A Certifying Authority is a trusted agency whose central responsibility is to issue, revoke, renew and provide directories for Digital Signature Certificates. According to Section 24 of the Information Technology Act 2000, "Certifying Authority" means a person who has been granted a license to issue Digital Signature Certificates.
A RA (Registration Authority) is an agent of the Certifying Authority who collects the application forms and related documents for Digital Signature Certificates, verifies the information submitted and approves or rejects the application based on the results of the verification process.
Physical documents are signed manually, similarly, electronic documents, for example e-forms are required to be signed digitally using a Digital Signature Certificate.
The different types of Digital Signature Certificates are :
Class 2: Here, the identity of a person is verified against a trusted, pre-verified database.
Class 3: This is the highest level where the person needs to present himself or herself in front of a Registration Authority (RA) and prove his/ her identity
DSC of either Class 2 and Class 3 signing certificate category issued by a licensed Certifying Authority (CA) needs to be obtained for e-Filing on the MCA Portal.
What is the validity period of a Digital signature Certificate?
The Certifying Authorities are authorized to issue a Digital Signature Certificate with a validity of one or two years.