Class of Certificates
| In accordance to the guidelines of IT-Act and the X.509 Certificate Policy for India PKI published by Controller of Certifying Authorities, e-Mudhra issues 3 classes of Certificates, namely: Class 2 and Class 3. Each class of digital signature certificate is associated with specific security features and corresponds to a specific level of trust. |
Assurance Level: These certificates will be issued for both business personnel and private individuals use. These certificates will confirm that the information in the application provided by the subscriber does not conflict with the information in well-recognized consumer databases.
Applicability: This level is relevant to environments where risks and consequences of data compromise are moderate. This may include transactions having substantial monetary value or risk of fraud, or involving access to private information where the likelihood of malicious access is substantial.
| Assurance Level: This certificate will be issued to individuals as well as organizations. As these are high assurance certificates, primarily intended for e-commerce applications, they shall be issued to individuals only on their personal (physical) appearance before the Certifying Authorities. Applicability: This level is relevant to environments where threats to data are high or the consequences of the failure of security services are high. This may include very high value transactions or high levels of fraud risk. |
What is a Digital Signature Certificate (DSC)?
Digital Signature Certificate (DSC) is the electronic format of physical or paper certificate like a driving License, passport etc. Certificates serve as proof of identity of an individual or organization for a certain purpose on online / computer. Digital Signature Certificate (DSC) Certificate can be presented electronically to prove your identity, to access information or services on the Internet or to sign certain documents digitally manually.
What is a Digital Signature?
A digital signature is an electronic form of a signature that can be used to authenticate the identity of the sender of a message or the signer of a document, and also ensure that the original content of the message or document that has been sent is unchanged. Digital signatures are easily transportable and cannot be imitated by someone else. The ability to ensure that the original signed message arrived means that the sender cannot easily disclaim it later.
What is a Digital Signature Certificate (DSC)?
Digital Signature Certificates (DSC) is the electronic format of physical or paper certificate like a driving License, passport etc. Certificates serve as proof of identity of an individual for a certain purpose; for example, a Passport identifies someone as a citizen of that country; who can legally travel to any country. Likewise, a Digital Signature Certificate can be presented electronically to prove your identity, to access information or services on the Internet or to sign certain documents digitally.
Why do I need a Digital Signature Certificate?
A Digital Signature Certificate authenticates your identity electronically. It also provides you with a high level of security for your online transactions by ensuring absolute privacy of the information exchanged using a Digital Signature Certificate. You can use certificates to encrypt information such that only the intended recipient can read it. You can digitally sign information to assure the recipient that it has not been changed in transit, and also verify your identity as the sender of the message.
Where can I purchase a Digital Signature Certificate?
Legally valid Digital Signature Certificates are issued only through a Controller of Certifying Authorities (CCA), Govt. of India,licensed Certifying Authorities (CA), such as eMudhra.
eMudhra, a Certifying Authority (CA) licensed by CCA, offers secure digital signatures through various options tailored to suit individual as well as organizational needs.
Where can I use Digital Signature Certificates?
You can use Digital Signature Certificates for the following:
- For sending and receiving digitally signed and encrypted emails.
- For carrying out secure web-based transactions, or to identify other participants of web-based transactions.
- In eTendering, eProcurement, MCA [for Registrar of Companies efiling], Income Tax [for efiling income tax returns] Applications and also in many other applications.
- For signing documents like MSWord, MSExcel and PDFs.
- Plays a pivotal role in creating a paperless office.
How does a Digital Signature Certificate work?
A Digital Signature Certificate explicitly associates the identity of an individual/device with a pair of electronic keys – public and private keys – and this association is endorsed by the CA. The certificate contains information about a user’s identity (for example, their name, pincode, country, email address, the date the certificate was issued and the name of the Certifying Authority that issued it).
These keys complement each other in that one does not function in the absence of the other. They are used by browsers and servers to encrypt and decrypt information regarding the identity of the certificate user during information exchange processes. The private key is stored on the user’s computer hard disk or on an external device such as a token. The user retains control of the private key; it can only be used with the issued password.
The public key is disseminated with the encrypted information. The authentication process fails if either one of these keys in not available or do not match. This means that the encrypted data cannot be decrypted and therefore, is inaccessible to unauthorized parties.
Are Digital Signatures Certificate legally valid in India?
Yes, subsequent to the enactment of Information Technology Act 2000 in India, Digital Signature Certificates are legally valid in India.
Digital Signature Certificates are issued by licensed Certifying Authorities under the Ministry of Information Technology, Government of India as per the Information Technology Act.
What is the difference between a Digital Signature and a Digital Signature Certificate?
A digital signature is an electronic method of signing an electronic document whereas a Digital Signature Certificate is a computer based record that
- Identifies the Certifying Authority issuing it.
- Has the name and other details that can identify the subscriber.
- Contains the subscriber’s public key.
- Is digitally signed by the Certifying Authority issuing it.
- Is valid for either one year or two years.