How to Renew an Expired Digital Signature Certificate (DSC) in India?

Last Updated on September 19, 2026

Digital Signature Certificate (DSC) is a tool that is employed to authenticate electronic documents and filings in India. Companies, directors, designated partners, taxpayers, government contractors and authorised signatories may require a DSC for making filings at MCA, income-tax filing, GST services, e-tenders, EPFO services and many other online mediums.

Once the DSC becomes invalid, one cannot employ it for signing any new electronic documents. According to the Information Technology (Certifying Authorities) Rules, 2000, a DSC becomes invalid once it reaches its designated validity period. The validity period of the certificate cannot just be extended; instead, once it expires, a new certificate will be issued through the process as prescribed by a licensed CA.

The following guide highlights how to renew the expired DSC, document requirements, online process, fees and timelines, re-registration of the portal and challenges encountered by Indian businesses in this process.

What Is an Expired Digital Signature Certificate (DSC)?

Digital Signature Certificate is an electronic document that binds the identity of a subscriber to a public key. Digital signatures can be made possible using this kind of certificate. The IT Act, 2000 states that digital signatures are a tool to authenticate electronic documents, and the CCA licenses and governs certified authorities of India.

An expired Digital Signature Certificate cannot normally be used for digital signing. To continue using DSC-based services, the certificate holder generally needs to obtain a renewed or newly issued DSC from a licensed Certifying Authority after completing the required verification process.

Digital Signature Certificate includes details such as:

• The certificate serial number.
• The name of the issuing certifying authority.
• The name of the subscriber.
• Details of the public key.
• Validity of the certificate.
• Certificate status and its verification data.

A DSC is said to expire once it reaches the expiry date. As per the rules of the CCA, the expired DSC will be archived and cannot be used anymore. The validity of the certificate cannot be extended once it expires.

Renewal or new issue

The word “renewal” is often used by CAs and organisations. Nonetheless, once the certificate expires, it does not get extended beyond the existing validity period. It has to be issued again once the CA validates the submitted application.

The same USB token can perhaps be utilised by the applicant, but it will depend on:

• Compatibility of the token.
• Usability of the token.
• The present policy of the CA.
• The compromise of the previous private key or token.
• Ability to download the new certificate on the token.

Why Is DSC Renewal Important for Businesses?

Most online filings have a requirement to sign online using a valid DSC. According to MCA, all company annual compliance and LLP annual filings through the MCA21 program should be made using a digital signature by the person authorised to sign them.

Non-renewal of DSC could hamper:

• Company/LLP filings.
• Income-tax filings.
• Updating and filing for GST registration through DSC.
• Participation in e-tenders.
• Government procurements.
• Employer services associated with EPFO.
• Digital signing of contracts and documents.
• Portal registrations and updates.

Value of compliance

Renewing DSC on time can help signatories make the filing process smooth well before the statutory deadlines, thereby avoiding last-minute issues related to KYC, tokens or portal registration.

Who Needs to Renew an Expired DSC?

1. Companies and LLPs: The directors, designated partners and authorised representatives can require a DSC to file any document under the MCA or any other corporate compliance procedure.
2. Taxpayers and authorised signatories: Firms and individuals making use of the Income Tax e-Filing website may require registration of a valid DSC or re-registration of a DSC when their registered certificate has expired. Income Tax Department provides an option for re-registration of a DSC once the certificate has expired.
3. GST registered firms: In GST-related services, the requirement of a valid DSC may depend on the constitution of the taxpayer, the authorised signatory and the particular transaction. The GST website provides a facility called Register/Update DSC.
4. Government contractors and bidders: Businesses participating in e-tenders, government procurement and online bidding should maintain a valid DSC of the correct type and purpose.
5. Employers and establishments: Employers using EPFO services may need to upload or update the renewed DSC of an authorised signatory. EPFO materials refer to uploading the digital signature after renewal when the existing authorised signatory’s DSC has expired.

Other users: A DSC may also be required by-

1. Professionals filing documents for clients.
2. Foreign or non-resident applicants, subject to applicable verification requirements.
3. Trademark or intellectual-property applicants.
4. Organisations using digital signing systems.
5. Individuals using government e-services that accept DSC authentication.

Can an Expired DSC Be Renewed?

It is not possible to extend or reuse an expired DSC as an active certificate. According to the CCA guidelines, the certificate expires automatically on the expiry date mentioned by the authority, and it cannot be extended further. A new DSC can be issued post-expiry.

The process involves the following steps:

1. Identification of the issuing Certifying Authority.
2. Choosing the appropriate DSC type and expiry period.
3. Requesting renewal or issuance of a new DSC via the CA.
4. Going through the process of identity validation.
5. Payment of relevant charges.
6. Downloading the new DSC certificate on a compatible token.
7. Registration of the renewed DSC on government websites.

In case the certificate has been revoked or there has been a change in the applicant’s details, the CA may ask for a fresh application instead of a routine renewal.

Eligibility Requirements for DSC Renewal

The applicant must usually:

• Be the person who will hold the DSC.
• Get the DSC issued from a Certifying Authority licensed by CCA.
• Give correct identity and contact details.
• Go through the KYC or verification procedure as prescribed by the CA.
• Use an appropriate cryptographic USB token, if necessary.
• Choose the appropriate DSC for the particular portal or facility.
• Make sure the name, PAN and other DSC details are correct.

The CCA says that individual persons and organisations should get their DSC from one of the licensed CAs.

Choose the appropriate DSC type

Before applying, make sure whether you require:

• Individual Signing DSC.
• Organisation or authorised-signatory DSC.
• Only signing certificate.
• Signing and encryption certificate.
• DSC for e-tendering.
• DSC for MCA, GST, Income Tax, EPFO or any other particular portal.

Do not choose the certificate just because it is economical. Make sure about the technical and certificate requirements of the particular portal.

Documents Required to Renew an Expired DSC

The required documents vary according to the CA, type of certificate, category of the applicant and the verification method used. Below is a list of documents typically asked for.

For individuals:

• PAN card.
• Aadhaar card or any other acceptable identity document.
• Proof of address, wherever needed.
• Passport-sized photo, wherever needed.
• Active mobile no. and email address.
• Information about existing DSC or certificate.
• If intending to reuse the USB token, then the existing USB token.
• Applicant’s consent and subscriber agreement.

For companies/LLPs:

• PAN of the firm.
• Certificate of Incorporation/registration.
• Proof of firm address, wherever needed.
• Authorisation letter/board resolution.
• PAN and proof of identity of authorised signatory.
• Details of DIN/designated partner, wherever needed.
• Information about existing DSC.
• USB token, wherever available.
• Email/mobile number of the firm.

For proprietorship/partnerships:

• PAN of proprietor/partner.
• Proof of identity and address.
• Proprietorship/partnership declaration/deed, wherever needed.
• Authorisation letter.
• Registration/tax document of the business, wherever needed.
• Existing DSC information/token details.

Aadhaar e-KYC

According to the MCA, it is possible for DSCs to be issued via the Aadhaar e-KYC method provided that the CA provides such an option. In this case, no documents will be needed in the typical form. As per the MCA, one can get in touch with the CA using the original documents, while self-attested copies will do. One must comply with the existing requirements of the particular CA that he/she chooses.

Since Aadhaar-based e-KYC verification is commonly used for DSC issuance, having your Aadhaar linked to PAN in advance helps avoid mismatches during the CA’s identity verification step, a frequent, avoidable cause of application delay.

How to Renew an Expired DSC Online?

1. Check whether the certificate has expired

Access certificate details using the utility software for the USB token or the concerned portal. Note down the following details:

• Name of certificate holder.
• PAN/ Organisation details.
• Type of certificate.
• Issuing CA.
• Expiry date.
• Status of the token.
• Portal registrations associated with the existing DSC.

2. Find out the CA issuing the certificate

Verify DSC certificate/ token details to find out the CA. Apply via a CA authorised by the CCA. CCA provides details of licensed Certifying Authorities and their services.

3. Make the right choice regarding renewal

Go to the CA’s official website and select one of the options below:

• Renew DSC.
• Reissue DSC.
• Application for a new DSC.
• Renew individual DSC.
• Renew organisation DSC.
• Renew signing/ signing & encryption DSC.

There are different terminologies used by various CAs. If the old DSC has expired, it can be considered as a new issuance by the CA.

4. Selection of certificate type and validity

Select the desired certificate according to its usage and select the available validity period. According to MCA, DSCs are usually provided for a period of one year or two years and can be extended after that.

There could be different certificate types along with validity periods as per the availability and requirements of the CA.

5. Fill the Application Form

Fill the application form accurately, which includes the following information:

• Name
• PAN
• Address
• Mobile No.
• E-mail ID
• Details of Organisation, if any.
• Designation & Authorisation.
• Certificate Purpose.
• Existing Certificate details.

6. Upload documents/e-KYC

Upload the requisite documents in the prescribed format or complete e-KYC or video verification where provided and relevant.

7. Verify

The CA shall verify the applicant using one or more of the following processes:

• OTP Verification based on Aadhaar;
• PAN verification;
• Video verification;
• Document verification;
• Verification from the bank/organisation;
• Validation of existing certificate.

The exact process is dependent upon the CA’s Certification Practice Statement.

8. Pay fee

Pay the fee applicable as charged by the CA through the available payment option. Retain the receipt and the application reference number.

9. Download the new DSC

Upon processing, download the new DSC to:

• Current compatible USB token; or
• New crypto token from the CA.

Most CAs require the certificate to be downloaded within 30 days of approval; the system typically rejects pending downloads left too long, requiring the application to be restarted.

It is essential to keep the private key and the certificate secure. Ensure that you do not share the token password/private-key credentials with any unauthorised individual.

Note: From 21 September 2026, new USB tokens issued for DSCs must meet FIPS 140-3 certification. If you’re renewing around this period, confirm with your CA whether your existing token remains compliant or whether a new certified token is required; this could affect both cost and turnaround time.

10. Install token utilities/driver

Install the latest version of the token driver, browser components, signing utility and portal-specific software. Government portals require the use of certain software such as emSigner or other signing utility software.

11. Testing of renewed DSC

It should be tested before urgent use. Test for the following:

• Correct certificate is present in the token.
• Name of the certificate holder is correct.
• Certificate is within the validity period.
• Portal recognises the certificate.
• Signing utility is running.
• Token password is correct.
• Test signature is generated successfully.

12. Registration of renewed DSC on portals

Renewed certificate will not automatically get registered on all portals. It needs to be registered separately on MCA, Income Tax, GST, EPFO and e-tenders portals and other portals where the DSC was registered earlier.

How to Update a Renewed DSC on Government Portals?

A new DSC must generally be updated separately on Income Tax, GST, MCA, EPFO, tender and other portals. The Income Tax and GST official manuals provide separate registration procedures.

1. MCA portal:

MCA filings require the authorised person to use a valid DSC. The MCA provides DSC-related services and states that authorised persons can obtain specified DSCs from CCA-appointed Certification Agencies.

The exact update procedure may depend on the relevant MCA service and user role. Before signing a form, install the current token utility and ensure that the certificate is associated with the correct person.

2. Income Tax e-Filing portal:

The Income Tax Department’s official user manual provides the following process:

1. Log in to the e-Filing portal.
2. Open the user profile.
3. Select Register DSC.
4. Confirm that the emSigner utility is installed.
5. Connect the USB token.
6. Select the provider and certificate.
7. Enter the provider password.
8. Click Sign.
9. If the old DSC has expired, follow the re-registration process displayed by the portal.

The Income Tax portal requires the use of a Class 3 DSC. Class 2 certificates were discontinued by the CCA effective 1 January 2021, and only Class 3 is now issued or accepted for any statutory filing, including Income Tax, MCA, GST, EPFO, and e-tenders. If your archived expired certificate shows “Class 2,” this is simply because it predates the 2021 change; your renewed certificate will be issued as Class 3. Want to understand the difference between Class 2 and Class 3 DSC? Read our detailed guide: Class 2 vs Class 3 DSC: What’s the Difference and Which Do You Need?

3. GST portal:

The GST tutorial states that the taxpayer should:

• Log in to the GST portal.
• Open My Profile.
• Select Register/Update DSC.
• Connect the DSC token.
• Ensure the emSigner utility is installed and running.
• Select the PAN of the authorised signatory.
• Select the certificate.
• Complete the signing process.
• The PAN in the DSC should correspond with the authorised signatory details available on the GST portal.

4. EPFO portal

Where an authorised signatory’s DSC has expired, EPFO guidance indicates that the renewed digital signature should be uploaded through the applicable employer facility.

Because portal interfaces may change, employers should follow the latest instructions displayed on the EPFO employer portal.

E-tender and procurement portals

• For e-tendering, update the DSC in the bidder profile or signing utility used by the relevant portal. Check whether the tender requires:
• Signing certificate.
• Encryption certificate.
• A specific certificate class.
• A particular token standard.
• Registration before the bid-submission deadline.

DSC Renewal charges

Government fee:

There is no uniform government fee for DSC renewal by individuals and organisations. This cost is usually charged by the Certifying Authority and is market-driven.

According to MCA, “the cost for obtaining a Digital Signature Certificate (DSC) from a CA may include the following:

• Cost of the USB Token.
• Certificate Issuance cost.
• Renewal cost post validity period.”

According to MCA, costs charged by various CAs are different and market-driven.

Factors affecting total cost:

The total cost could be based on the following factors:

• Type of Certificate.
• Category of Individual/Organization.
• Signing/Signing and Encryption.
• Validity Period.
• New/Existing USB Token.
• Delivery Costs.
• Mode of Verification.
• Portal/Professional services.
• Token reissue in case of loss/damage/revocation.

Professional fee:

In case you are seeking assistance from a professional for obtaining the certificate, the professional fee will be separate from that of the CA. It could include:

• Identification of DSC Type.
• Review of Documents.
• Application Assistance.
• Coordination KYC.
• Token Installation.
• Registration of Portal.

DSC Renewal Processing Time

The time required for DSC renewal or issuance of a new DSC is fast when the application, KYC and token are ready. However, there is no one-time line that fits all CAs and applicants.

Factors affecting the timeline

• Documents submitted.
• Video / KYC Verification.
• Approval from CA.
• Confirmation of payment.
• Availability of token.
• Download of Certificate.
• Installation of drivers and utilities.
• Re-registration of portal.
• Matching Name/PAN.

DSC Compliance and Security Requirements After Renewal

Only a personal DSC can be used – As per the MCA guidelines, it is an offence to use the digital signature of any other individual. The digital signature certificate can only be used by the individual to whom it has been issued.

• Private key protection – The USB token needs to be protected:
• Do not disclose the password of the token.
• Avoid email transfers or sharing of private-key files.
• Do not allow unauthorised employees to sign via the certificate.
• Promptly revoke the DSC if the token and private key are lost or stolen.

Certificate status verification – The certificate should not be expired or revoked while affixing the signature. As per the guidance under the CCA, validity of the electronic signature is decided based on the validity of the certificate at the time of affixing the signature.

Revocation of the compromised DSC – In case of compromise of the private key, misuse, loss or need for revocation of the certificate, immediately contact the issuing CA and request revocation of the DSC. The following are some of the grounds under which the CCA allows the revocation of the DSC.

What Happens If a DSC Is Expired or Revoked or Lost?

1. Expiry of DSC

An expired DSC cannot be utilised as an active certificate for any signing purposes. As per the regulations of CCA, the DSC is archived after it expires and is not to be reused.

The general solution to such a problem is to obtain a new DSC and register it on the requisite portals.

2. Revocation of DSC

A revoked DSC becomes void for the purpose of trusted usage and is added to the Certificate Revocation List. It cannot be used for signing purposes.

A revoked certificate might not be eligible for regular renewal. The applicant may have to file for a new certificate along with reasons for the same.

3. Loss or compromise of token

In case of loss, theft or compromise of the token or private key:

• Cease using the certificate.
• Inform the CA.
• Either suspend or revoke the DSC as needed.
• Renew the DSC.
• Register the renewed DSC on all the portals.

Common Mistakes to Avoid During DSC Renewal

• Wait till the last minute to apply for your renewal.
• Thinking that an expired DSC can be renewed without getting a new one.
• Choosing an unlicensed or unauthorised DSC provider.
• Getting the wrong kind of certificate.
• Using someone else’s DSC.
• Not verifying the PAN and the name in the certificate.
• Not organising your authorisation documents.
• Using an incompatible USB token again.
• Giving out the token password to employees or agents.
• Forgetting to renew your DSC in all the portals.
• Installing old token drivers or signing utilities.
• Not checking your DSC prior to making an important filing.
• Overlooking the compromise or loss of your token.
• Thinking that your renewal in one portal automatically updates others.
• Believing anything you’re told about price and immediate availability.
• Not saving the application and the certificate documents.

Benefits of Renewing a DSC on Time

• Ensures continuous e-filing.
• Assists in compliance with statutory time limits for organisations.
• Mitigates any chances of being disqualified from tenders or procurement due to technical errors.
• It facilitates the use of portals such as MCA, GST, Income Tax, and others by authorised signatories.
• It minimises any last-minute KYC and token issues.
• It helps to ensure secure authentication of electronic documents.
• It makes it easy to test and upgrade portals before an urgent filing.
• A DSC does not in any way mitigate the responsibility of the person signing the document.

DSC Renewal: Practical Scenario

A private limited company has a director whose DSC has already expired at the time when the annual filing for the MCA was supposed to be done. The director picks the CA who issued him/her the DSC, picks up the right type of certificate that needs to be used for MCA filing, uploads the KYC and company authorisation documents, verifies and acquires a new DSC.

The company will:

• Download the new certificate to a compatible USB token.
• Install the token utility.
• Update the director’s DSC where necessary.
• Test the certificate on the MCA signing utility.
• Submit the MCA filing using just the director’s DSC.

How Kanakkupillai Can Help with DSC Renewal?

1. DSC Type Evaluation – Kanakkupillai can help determine the right type of DSC depending on your need for it in relation to MCA, GST, Income Tax, EPFO, e-tenders or any other online portal.
2. Assistance in Creating Document List – Our experts will help you arrange PAN, Aadhaar, proof of address, organisation documents, authorisation letter and other documents required by the Certifying Authority.
3. DSC Renewal/Fresh Issue Application Help – Our experts can help you complete the DSC renewal/fresh issue application form along with the necessary KYC process.
4. Help in Getting Organisation Authorisation – We can help you prepare a board resolution, authorisation letter and proof of association of the authorised signatory for companies, LLPs and partnership firms.
5. Help in Using Compatible USB Token and Installation – Our experts can help you install the drivers for the USB token and download the renewed DSC.
6. Government Portal Registration – Kanakkupillai can help you register/update the renewed DSC on the MCA, GST, Income Tax, EPFO and e-tenders portals.

Conclusion

An expired Digital Signature Certificate is not eligible for being renewed or utilised as an active certificate. Companies need to apply for a new certificate via a CCA-authorized Certifying Authority, undergo the verification process, download the same to a token and update it separately on all portals.

Getting renewal before urgent MCA, GST, Income Tax, EPFO, or tender submission would minimise unnecessary delays. Assistance in end-to-end DSC application and portal updating can be sought from Kanakkupillai.

Frequently Asked Questions (FAQs)

1. Can an expired DSC be renewed?

An expired DSC cannot be extended beyond its original validity. Under the CCA rules, it expires automatically and cannot be reused; a new DSC may be issued after expiry.

2. Who can apply for renewal of an expired DSC?

The certificate holder or authorised applicant may apply through a Certifying Authority licensed by the CCA. Companies and LLPs may need to provide organisation documents and authorisation evidence.

3. What documents are required to renew an expired DSC?

Common documents include PAN, Aadhaar or another accepted identity document, address proof where required, photograph, mobile number, email address and existing DSC details. Organisations may additionally need incorporation documents, organisation PAN, authorisation letters and authorised-signatory documents.

4. How much does DSC renewal cost?

There is no single universal government fee. CA charges vary according to the certificate type, validity, token, verification and related services. MCA states that DSC pricing is market-driven and may include issuance and USB-token costs.

5. How long does it take to renew an expired DSC?

The timeline depends on the CA, KYC method, document completeness, token availability and certificate download. Portal registration and technical testing require additional time.