Upload a signed PDF and get a complete cryptographic report — signer identity, certificate chain, timestamp, tamper detection, and CA trust level.
Aadhaar eSign, DSC, PAdES, PKCS#7 — all supported
Max 25 MB · Verified server-side · File deleted after verification
Everything citizens, businesses, and developers need to know about legally valid electronic signatures, trusted CAs, and the difference between a scanned signature and a real cryptographic one.
| Feature | Wet Ink | Scanned / Image | Drawn on Screen | OTP / Click-Sign | Aadhaar eSign / DSC |
|---|---|---|---|---|---|
| IT Act 2000 — Legally Valid | ✓ Yes | ✗ No | ✗ No | ⚠ Limited | ✓ Yes |
| Tamper-Evident | ✗ No | ✗ No | ✗ No | ⚠ Partial | ✓ Yes |
| Identity Verified | ⚠ Physical only | ✗ No | ✗ No | ⚠ Phone/Email | ✓ Govt. ID (Aadhaar) |
| Court Admissible | ✓ Yes | ✗ Generally no | ✗ Generally no | ⚠ Case-dependent | ✓ Yes (Sec 3A) |
| Cryptographically Verifiable | ✗ No | ✗ No | ✗ No | ✗ No | ✓ Yes |
| Non-Repudiable | ⚠ Disputed easily | ✗ No | ✗ No | ⚠ Partial | ✓ Yes |
| Detects document tampering | ✗ No | ✗ No | ✗ No | ✗ No | ✓ Yes — SHA-256 |
| Certificate Authority backed | ✗ No | ✗ No | ✗ No | ✗ No | ✓ CCA-licensed CA |
| This tool can verify it | ✗ No | ✗ No | ✗ No | ✗ No | ✓ Yes |
Defines digital signatures using asymmetric cryptography. Only CCA-licensed CA certificates are legally recognized as digital signatures in India.
Added in the 2008 amendment. Covers Aadhaar-based eSign. Broadened the definition beyond PKI-DSC to include government identity-backed signatures.
An electronic record authenticated by a valid digital signature has the same legal force as a signed paper document.
In legal proceedings, a valid digital signature is presumed to be that of the subscriber. The other party must disprove it — not you.
Lists Aadhaar-based eSign as an approved electronic signature method. C-DAC, eMudhra, NSDL etc. are UIDAI-empanelled ASPs.
MeitY appoints the Controller who licenses and audits all Certifying Authorities. All valid Indian digital signature certificates chain up to CCA India.
All the following are licensed by the Controller of Certifying Authorities (CCA), MeitY, Govt. of India and recognized under IT Act 2000. Their certificates chain up to CCA India 2022 Root CA. Source: cca.gov.in ↗
Primary issuer for Aadhaar OTP and biometric eSign. Issues short-lived (~30 min) session certificates via C-DAC Sub CA for eKYC 2022. Also issues Class 3 long-term DSCs. CRL: esign.cdac.in
India's largest commercial CA. Issues Class 2 and Class 3 DSCs. Empanelled as Aadhaar eSign ASP under UIDAI. Widely used for company signings, MCA21, SEBI filings.
Issues DSCs tied to PAN database. Popular for income tax, ROC/MCA filings. NSDL eSIGN provides Aadhaar-based eSign service for citizens.
Long-standing CCA-licensed CA. Issues Class 3 certificates for individuals, organizations, and government departments. Part of Sify Technologies.
Class 3 DSCs including DGFT and Document Signer certs. Widely used for customs, import/export, and corporate filings.
Issues certificates exclusively to Govt. of India officials. Used across e-governance portals: MCA21, GST, Income Tax, eProcurement.
Certificates specifically for banking and financial institutions. Institute for Development and Research in Banking Technology — RBI subsidiary.
The root of India PKI. All CA certificates ultimately chain to CCA India 2022. RSA-4096, valid until 2042. Operated by MeitY. Not used directly for signing.