Digital Signature Certificates · eMudhra Class 3

eMudhra

Get the Class 3 DSC your filing will not go through without

The filings that matter will not accept anything else — and this one is legally your signature. Issued the same day, entirely online.

  • Most filings simply will not go through without oneMCA21 and ROC, GST returns for companies and LLPs, EPFO claims, e-tenders and audit-case income tax returns all require a Class 3 DSC. There is no paper alternative to fall back on.
  • It carries the same legal weight as ink on paperUnder the Information Technology Act 2000, a certificate from an authority licensed by the Controller of Certifying Authorities is legally equivalent to your handwritten signature, and stands up as evidence.
  • Issued the same day, with no paperworkPaperless Aadhaar eKYC and a short video verification. Nothing to print, courier, notarise or attest, and no branch to visit.
  • One certificate covers every portalThe same Class 3 certificate signs on MCA21, GST, ICEGATE, EPFO, income tax, DGFT, trademark filings and court e-filing. You do not buy one per department.

Licensed by the Controller of Certifying Authorities, Government of India

  • CCA-licensed Certifying Authority
  • IT Act 2000 — legally your signature
  • Class 3, the only class still issued
  • FIPS 140-2 / 140-3 USB token
  • $13.99a year for a Class 3 signing certificate
  • Same dayissued after paperless Aadhaar eKYC
  • ₹600 freeone year of Aadhaar eSign included
  • Every portalMCA21, GST, EPFO, ICEGATE, tenders, courts

Build the certificate you need

Tell us what you are filing and we will pick the class, the certificate type and the term that portal actually requires. The price is the price — nothing is added at checkout.

1 What are you going to use it for?

Pick the closest match. This sets the rest of the form for you, and you can still change anything below.

2 Who is the certificate for?

An organisation certificate carries your name and the company name. Both cost the same, so pick by what the portal expects.

3 What does it have to do?

Signing covers almost everything. Encryption is what tender portals use to seal and open your bid.

4 How long do you want it for?

A certificate cannot be edited once issued, so pick a shorter term if your name, company or role is likely to change.

Every option and what it costs

Every certificate eMudhra issues and what each costs, at their published list price effective 15 July 2024. No option is hidden behind an enquiry form and nothing is added at checkout.

Class 3 — Indian applicants
Certificate 1 year 2 years 3 years  
Signature onlySigning filings and returns. MCA21, income tax, GST, EPFO, ICEGATE, courts. Details →
Encryption onlyDecrypting documents sent to you where signing is handled elsewhere. Details →
Signature + EncryptionRequired by every e-tender and e-procurement portal. Details →
Class 3 — foreign nationals and foreign organisations
Certificate 1 year 2 years 3 years  
Signature onlyAttested passport and address proof in place of Aadhaar eKYC. Details →
Encryption only Details →
Signature + Encryption Details →
Specialist certificates
Certificate 1 year 2 years 3 years  
DGFT certificateOrganisation certificate carrying your IEC. One and two years only. Details →
Document Signer — Class 3Server-held, for signing documents automatically in bulk. Details →
Document Signer — Class 2Still issued for document signer certificates. Details →
Tokens and optional services
ItemOptionPrice 
USB crypto tokenFIPS 140-2 or FIPS 140-3. Already included with every certificate — buy only for a spare or a replacement. FIPS 140-2 Details →
FIPS 140-3 Details →
Support planOptional. Silver, Gold or Platinum assistance with enrolment, download and daily use. Silver Details →
Gold Details →
Platinum Details →

The rest of the eMudhra range

Everything above is one person, one token, one certificate. These are the things that do not fit that shape.

  • For applicants outside India

    Foreign directors, overseas signatories on Indian company filings and non-resident applicants. Verification runs on an attested passport and address proof plus a video call rather than Aadhaar, so allow three to five working days.

    from $90.99
  • Document Signer for bulk signing

    Issued to the organisation and held in an HSM or on your application server rather than on a token. Your system calls it and signs — the only practical way to put a valid signature on ten thousand invoices a night.

    from $75.99
  • Spare and replacement tokens

    The private key is generated on the device and cannot be exported, which is why a lost token means a fresh certificate. Buy FIPS 140-3 if you are buying today.

    from $6.99
  • DGFT for importers and exporters

    IEC registration and modification, advance authorisation, EPCG, MEIS and RoDTEP claims — everything filed on dgft.gov.in.

    from $18.99
  • Tender and procurement bidding

    The signing and encryption pair, sold together, for GeM, CPPP, IREPS, MSTC, the state e-procurement portals and the PSUs that run on the same platforms.

    from $20.99
  • Assisted enrolment and support

    Optional plans from eMudhra covering KYC enrolment help, download assistance, renewal support and free replacement. Ordinary questions are answered free by our own team.

    from $5.99

What happens after you order

Most Indian applicants finish the whole thing in an afternoon. The step that takes the longest is almost always the one you do yourself.

  1. You place the order

    Pick the certificate above and pay. We send the eMudhra application link straight away.

    A few minutes
  2. You complete eKYC

    Aadhaar OTP or biometric verification, then a short video where you read a code aloud. Have your PAN and Aadhaar to hand.

    15–30 minutes
  3. eMudhra issues and we ship

    Approval is usually the same working day. The certificate is issued and the USB token goes out by courier or speed post.

    Same day, then 2–5 days in transit
  4. You download it to the token

    Plug in the token, run the eMudhra download tool and enter your challenge code. The key never leaves the device. We will walk you through it if it sticks.

    10 minutes

What you will need to hand

Aadhaar eKYC removes the paperwork for most Indian applicants. These are what you need when it does not apply.

  • Individual

    Indian applicant, Aadhaar eKYC route

    • PAN card
    • Aadhaar number with the mobile linked to it, for the OTP
    • A recent photograph, captured during the video step
    • An email address and mobile number you control — both are verified
  • Organisation

    Company, LLP, partnership or trust

    • Everything from the individual list, for the applicant
    • Authorisation letter on company letterhead naming the applicant
    • Certificate of incorporation, or the partnership deed
    • Company PAN and a recent bank statement or GST certificate as address proof
    • Attestation by a director or partner other than the applicant
  • Foreign applicant

    Non-resident individual or overseas company

    • Passport, attested by the Indian embassy or a notary where you live
    • Address proof, attested the same way
    • Applicant photograph and a video verification call
    • For a company, the incorporation document, similarly attested
    • Apostille in place of embassy attestation where the Hague Convention applies

Read this before you order

Class 2 no longer exists, whatever a portal still says

The Controller of Certifying Authorities withdrew Class 2 Digital Signature Certificates on 1 January 2021. Every portal that used to ask for Class 2 now accepts Class 3, and no Certifying Authority may issue a new Class 2 certificate. If a page or a consultant is still quoting you for Class 2, they are quoting for something that cannot be issued. The one exception is the Document Signer Certificate, where Class 2 remains available.

The token is compulsory, and it is not transferable

CCA rules require the private key to be generated inside, and never to leave, a FIPS-certified cryptographic device. That is why the certificate arrives on a USB token and cannot be emailed, copied or backed up. Lose the token and the certificate is gone with it — you buy a new one, you do not recover the old one. Only one certificate on a token can be in use at a time.

Once it is issued, it is not refundable

eMudhra will refund an order it could not process because KYC could not be completed. It will not refund a certificate that has been issued, because issuance is the product. Check the spelling of your name, your PAN and, for DGFT, your IEC before you submit — a mistake in any of them means buying the certificate again, not editing it.

Buy FIPS 140-3 if you are buying a token today

eMudhra will facilitate exchange of FIPS 140-2 tokens for FIPS 140-3 through the manufacturers after 21 September 2026. Starting on the newer standard avoids that swap entirely.

Questions we get asked about this

Which one do I actually need?

For almost everything, a Class 3 signature certificate. Add encryption only if you are bidding on e-tender or e-procurement portals, which need the pair, or if you have to decrypt documents that are sent to you encrypted. If you file with DGFT you need the DGFT certificate specifically — nothing else is accepted there.

Individual or organisation — which should I pick?

An organisation certificate carries both your name and the company name, and is what you want when you sign on the company’s behalf: MCA filings, GST, tender bids, EPFO. An individual certificate carries only your name and suits personal income tax filing and court e-filing. They cost the same, so pick by what the portal expects rather than by price.

Is a two or three year certificate better value?

Yes, and the configurator shows you by how much. Three years at ₹2,250 works out under ₹750 a year against ₹1,350 for a single year. The one reason to choose a shorter term is a name, company or role that you expect to change, because a certificate cannot be edited — a change means a new one.

How long does it take?

For an Indian applicant using Aadhaar eKYC, issuance is usually the same working day. The token then takes two to five days to reach you by courier or speed post. Foreign applicants should allow three to five working days for issuance because verification runs on attested documents rather than Aadhaar.

Can I use one certificate on more than one portal?

Yes. One Class 3 certificate registers on MCA21, the income tax portal, GST, EPFO, ICEGATE and the tender portals at the same time. You register the same certificate separately on each, which is a few minutes per portal. You do not need a certificate per portal, whatever anyone selling one per portal tells you.

What happens when it expires?

Renewal is a fresh certificate rather than an extension, and it goes through eKYC again. You can reuse your existing token if it still works. Start about two weeks before expiry — an expired certificate cannot be renewed, only replaced, and anything you signed before expiry stays valid.

Who do I talk to if the download fails?

Us. Email help@sslretail.com with the order number and what the tool told you. The common causes are a token driver that never installed, a browser that has blocked the helper application, or a challenge code that has already been used. None of them require a new certificate.

Not sure which certificate the portal wants?

Tell us which website is asking and what it said, and we will tell you exactly which one to buy — before you spend anything.

help@sslretail.com