- What is Digital Signature Certificate (DSC)
Ans : Digital signatures are electronically generated and can be used to ensure the integrity and authenticity of some data and protect against non-repudiation. It is a form of an electronic credential on the Internet. After the enactment of Information Technology Act 2000 in India, Digital Signatures are legally valid in India. It is commonly abbreviated as DSC.
- What are different classes of DSC?
Ans : There are four classes of DSCs, a Certifying Authority can issue. These are :
- Class 1 : It is generally used for email exchanges. However this is the least popular in India.
- Class 2: These certificates are issued for both business personnel and private individuals use. These certificates are majorly used for low risk transactions, eg: Income Tax efiling & MCA-21.
- Class 3 : This certificate will be issued to individuals as well as organizations. These certificates are majorly used for eTendering and IRCTC eTicketing.
- Special Purpose Certificate : Secure Socket Layer (SSL) and Document Signer Certificate are special purpose certificates used for Website (HTTPS) and bulk signing at the server respectively.
[ There is separate DSC issued for Signing and Encryption in case of Class 2 & Class 3 Organizations DSC ]
What is the validity of DSC available
Ans : A DSC can be issued upto three year validity while (n)Code issues upto 2 yr validity. The difference is in the commercials. 2 yr DSC is marginally higher than 1 yr DSC.
What is the difference between Only Sign and Sign + Encrypt Certificate ?
Ans : Class 2 and Class 3 comes into two categories - Only Sign and Sign + Encrypt.
Who decides what Class and Type of DSC I require ?
- With Only Sign Certificate, one can Sign the data to ensure the Data integrity and non-repudiation. Such types of certificates are majorly used for Income Tax eFiling, MCA-21, DGFT, eTicketing, etc.
- With Sign + Encrypt, apart from Signing, one can also Encrypt the data into a system algorithm to protect it from the unauthorized access of data. These are majorly used for eTendering.
Ans : It is decided by the Application owner (like Govt. website, eTendering portal, MCA-21 website, Income tax portal, etc) i.e Application, where you intend to use the DSC. For example, if you plan to use the DSC at MCA-21 Website, MCA-21 decides what class and type of certificate you have to be procured from a Certifying Authority like us in India.
What is OID?
Ans: OID stand for Object Identifier, OID is used to differentiate one class of certificates from another as per CCA IOG Guidelines and also indicate which CA has used the DSC and helps software applications to easily validate DSC.
What is CPS?
Ans : CPS stand for Certification Practice Statement. It is basically a detailed statement of the DSC issuance practices and operational procedures to issue a DSC to the subscriber. Every Certifying Authority will have different CPS. Our CPS is available at our website – www.ncodesolutions.com
What is Subscriber Agreement?
Ans : A Subscriber Agreement is an agreement between Subscriber and (n)Code Solutions CA stating that, subscriber is solely responsible for the protection of the Private key in Crypto Token and ensuring functionality of his/her key pair. Subscriber also agrees that all the information provided to (n)Code is correct. (n)Code Solutions CA will not be responsible for any legal disputes arising due to misrepresentation on the part of subscriber. The subscriber agreement is available at our website www.ncodesolutions.com
What is Revocation and how can I Revoke my DSC?
Ans : A DSC can be revoked under circumstances like:
What is a USB Token?
- Users suspect compromise of certificate private key.
- Change of personal data.
- Change of relationship with the organization. To revoke your DSC, download the revocation form available at our website www.ncodesolutions.com
- Raise the revocation request by sending mail to email@example.com from the registered email ID while buying DSC. (n)Code can ask for more information in case of any doubt before DSC gets Revoked.
- The subscriber can submit filled & signed revocation form along with id proof to nearest (n)Code office.
Ans: The X.509 Certificate Policy for India PKI mandates that the private key of the DSC of the subscriber should be stored only in a Cryptographic token ( which resembles a pen drive). There are four major makes of USB Token available - ePass, mToken, Alladin and Proxkey as of now. USB Token is must to obtain a DSC.
Pls refer to www.cca.gov.in for CCA Crypto guidelines.
IT ACT and Amendment (for reference)
Grievance redressal or Feedback Sharing
Ans : At (n)Code we truly believe in providing best in class services to our customers. We aim to understand both our strengths and shortcomings from our customer's point of view and work across to meet their needs. If you are not satisfied with the service received or you have a feedback to share w.r.t to the services availed, you can draw our attention either by calling us at our toll free no. 1800 - 419 – 4455 or by writing to us at firstname.lastname@example.org. We will immediately take necessary action.
DSC Issuance Process - Activities
||Submission of the Application form along with required Supporting Docs and Payment for specific Class of DSC
||Registration in system as per the Application received
||Upload latest Video of the Subscriber
||Issuance of Auth/Reference Code on the registered Mobile of the Subscriber
||Download DSC using the Auth/Reference Code from (n)Code website ( or link received by mail )
||Issuance of Invoice and sending it to registered email ID of the Subscriber.