Legal & Compliance

Digital signature certificates, issued properly.

Class 3 DSCs from eMudhra and Capricorn, both licensed Certifying Authorities, with Vybe as a registered partner of each. Individual, organisation, combo and DGFT certificates, with the USB token if you need one, and the token handed to you rather than kept in our drawer.

From ₹1,500 for a two-year Class 3 certificate · ₹599 for a USB token, priced separately

Issued by a licensed CA. We are a registered partner of eMudhra and Capricorn.

WhatsApp us Email legal@vybe.net.in

Who needs it

Anyone who has to sign something electronically where a scanned signature will not do: company filings with the MCA, income tax and GST returns, e-tendering and e-procurement portals, EPFO and trademark filings, and DGFT work for importers and exporters.

The certificate is issued by the Certifying Authority, not by Vybe. We are a registered partner of eMudhra and of Capricorn, which is how we get you issued quickly and support you afterwards, but the certificate itself carries the CA’s name.

What we need from you

PAN, and a mobile number linked to Aadhaar for the verification step
A working email address, which becomes part of the certificate
The applicant available for a short video verification, which is mandatory
For an organisation certificate: GST or incorporation proof and an authorisation letter for the signatory
For DGFT: the IEC of the firm

In detail

Digital signature certificates

What a DSC is, and who actually issues it

A digital signature certificate is the electronic equivalent of signing and sealing a document, and it holds up under the Information Technology Act because of who issues it. Certificates come from licensed Certifying Authorities working under the Controller of Certifying Authorities. Vybe is a registered partner of two of them, eMudhra and Capricorn, which lets us get an application through quickly and support you afterwards. We want to be clear about the line, though: the certificate is issued by the CA and carries its name. We are the partner who gets you there, not the issuer.

Which one you need

Class 3 is what gets issued now, for everything. The older Class 2 certificate was discontinued at the start of 2021 and no longer exists as an option, so if a form still asks for one, Class 3 is the answer. Within Class 3 the choice is about whose name is on it and what it does. An individual certificate sits in a person’s own name and covers income tax, GST, MCA filings and most day-to-day signing. An organisation certificate carries the organisation’s name alongside an authorised signatory. A combo certificate adds encryption on top of signing, which most e-tendering and e-procurement portals insist on. A DGFT certificate is the specific one for importers and exporters filing on the DGFT portal, and it is tied to the firm’s IEC.

The token, and why it is a separate line

A Class 3 certificate has to live on a certified cryptographic USB token. That is not an upsell, it is how the thing is designed: the key pair is generated inside the token and the private key cannot be copied out of it, which is exactly what makes the signature worth something. We price the token at ₹599 separately from the certificate for a simple reason. If you already have a compatible token with room on it, you should not be paying for another one. If you do not, you need one, and you will keep using it at renewal.

How issuance actually goes

Paperless, in most cases, and quicker than people expect. The application is filled in, verification runs through Aadhaar-based eKYC with an OTP to your linked mobile, and a short video verification is recorded, which is mandatory and cannot be done by somebody else on your behalf. Once the CA approves, the certificate is downloaded onto the token and you set your own PIN. A straightforward individual certificate is often the same day. Organisation and DGFT certificates take longer, because the authorisation letter and the entity documents have to be verified by the CA as well.

Your signature stays yours

It is common practice in this trade for a consultant to keep a client’s token in a drawer and sign things as and when needed, and it is a genuinely bad idea. That token is your legal signature. Anything signed with it is signed by you, whoever was holding the plastic at the time. So we hand the token over, you set the PIN, and you keep both. If you want us to prepare a filing, we will prepare it and you will sign it. We will not ask you to leave your DSC with us, and we would think carefully about anyone who does.

Renewal, loss and what it costs

Certificates are issued for one, two or three years, and the starting price of ₹1,500 is for a two-year Class 3 certificate, with the other durations and the organisation, combo and DGFT variants quoted on the same basis. Renewal is a fresh certificate rather than an extension, and it can go on the token you already have. If the token is lost or the PIN is forgotten past its retry limit, the certificate is gone: the key cannot be recovered by us, by the CA, or by anyone else, and a new certificate has to be issued. Tell us straight away if a token goes missing, because the existing certificate should be revoked.

FAQ

Questions, answered.

Who is the certificate actually issued by?

By the Certifying Authority, either eMudhra or Capricorn, both licensed under the Controller of Certifying Authorities. Vybe is a registered partner of both, which is how we get applications processed quickly and how we support you afterwards, but the certificate carries the CA’s name and its trust chain, not ours. We mention this because we are careful elsewhere on this site about what we issue ourselves and what we do not.

What does ₹1,500 cover, and what is extra?

It is the starting price for a two-year Class 3 certificate. The USB token is ₹599 and priced separately, because if you already have a compatible token you should not be buying another one. Organisation certificates, combo certificates for e-tendering, DGFT certificates and one or three year validities are quoted on the same basis, and you will have the exact figure before anything is applied for.

Do I need a Class 2 or a Class 3 certificate?

Class 3, and it is not really a choice any more. Class 2 certificates were discontinued at the beginning of 2021 and are no longer issued at all, so where a portal or an old form still refers to Class 2, a Class 3 certificate is what it will accept. The question worth asking instead is whether you need signing only or a combo certificate with encryption, since most e-tendering portals require the latter.

Can you keep our token and file things for us?

No, and we will say no even if you ask. A DSC is your legal signature, and anything signed with it is signed by you regardless of who was holding the token. We hand the token over, you set the PIN, and it stays with you. Where we are preparing a filing, we will get it ready and you will sign it. That is the only arrangement we are willing to work under.

How long does it take?

An individual Class 3 certificate is often issued the same day, since the process is paperless: eKYC with an OTP to your Aadhaar-linked mobile, and a short video verification you have to do yourself. Organisation and DGFT certificates take longer because the entity documents and the authorisation letter go through the CA’s own verification. The one thing that reliably holds an application up is a mobile number that is not linked to Aadhaar, so it is worth checking that first.

We lost the token. Can the certificate be recovered?

No. The private key is generated inside the token and never leaves it, which is the whole point of the design, so it cannot be extracted, backed up or recovered by us or by the CA. A lost token, or a PIN entered wrongly past its retry limit, means a new certificate. Tell us as soon as a token goes missing so the existing certificate can be revoked, and do not wait to see if it turns up.

The rest of what we file.

All registrations

Every filing we take on, with the fees side by side.

GST registration

GSTIN for a new business, a branch or a turnover threshold crossed.

MSME / Udyam registration

The Udyam certificate that unlocks MSME benefits, subsidies and tender eligibility.

FSSAI registration & licence

Basic registration, or a State licence, for anyone handling food.

DPIIT / Startup India recognition

Startup India recognition, prepared and filed. The government charges nothing for it.

ISO certification (non-accredited)

ISO 9001, ISO 22000 and ISO 27001 certificates issued by us, verifiable on our portal, and not accredited by any accreditation body.

NSDC / Skill India consulting

Advisory work on NSDC and Skill India training partner registration, and on affiliation applications generally. We review the file and tell you what is missing. You file it.