Class 2 vs Class 3 DSC: What Changed and Which You Need

If you bought a digital signature a few years ago, you may have a "Class 2" certificate — and wondered why everyone now talks about "Class 3". The short version: Class 2 has been retired, and Class 3 is the only class issued today. Here's what actually changed, and what it means for you.

What were Class 2 and Class 3?

Digital Signature Certificates used to come in different "classes" based on how strictly the holder's identity was verified. Class 2 verified identity against a trusted database (like PAN). Class 3 required stronger, in-person or video-based verification, making it the higher-assurance option used for sensitive transactions like e-tendering.

What changed in 2021?

Following guidelines from the Controller of Certifying Authorities (CCA), Class 2 certificates were discontinued from 1 January 2021. Since then, Class 2 requirements have been merged into Class 3, so Class 3 is now the standard for virtually everything — GST, income tax, MCA, DGFT, EPFO and tenders alike.

Class 2 vs Class 3 — at a glance

• Assurance level: Class 3 uses stronger identity verification (Aadhaar eKYC, OTP and video).
• Acceptance: Class 3 is accepted everywhere; Class 2 is no longer issued.
• Use cases: Class 3 covers both everyday filings and high-security portals like e-tenders.

I have an old Class 2 certificate — what now?

If your Class 2 certificate is still within its validity, it may continue to work on some portals, but you cannot renew it as Class 2. When it expires — or if a portal rejects it — you simply move to a Class 3 certificate, issued through the same quick, paperless process. See our guide on renewing a DSC.

So which DSC do you need in 2026?

For almost everyone, the answer is a Class 3 certificate — Individual if you file in your own name, or Organisation if you sign on behalf of a company. Add the Combo (Sign + Encrypt) option if you bid on e-tenders. Not sure? Our guide on which DSC you need walks through every use case.