DigiCert Verified Mark Certificates (VMC)

What is BIMI?

Brand Indicators for Message Identification (BIMI) is an email specification that promotes the broad use of DMARC protection by allowing brand logos to be shown within compatible email clients.

What is a Verified Mark Certificate?

The Verified Mark Certificate, often known as the VMC, is a unique digital certificate that enables companies and individuals to place a trademarked symbol next to the sender field in the list view of recipients' email inboxes.

How do I Display my Brand's Logo in Emails?

Using the BIMI standard, organizations can include their logo in outgoing emails. The organization's symbol will appear in the recipient's inbox and communications if their email setup supports BIMI. To ensure receivers see authentic logos, logos used with BIMI are independently verified. Follow Ste-By-Step Process for BIMI Setup.

Does a VMC work like a TLS Certificate? Do I need a CSR?

Unlike regular TLS certificates, VMCs function differently. They don't require a CSR to place an order, encrypt traffic, or utilize a private key. VMCs establish a link between an identity, a logo, an auditable domain, and a cryptographically verifiable domain.

Do I Need to list Domains and Subdomains when I order a VMC?

Subdomains don't usually need to be listed when ordering a Verified Mark Certificate (VMC) because the base domain covers them.

If my Company doesn't prioritize End-user Marketing or consumer markets, do I need a VMC?

Yes! Over 5 million businesses use Gmail, which shows VMCs; these organizations range in size from small startups to giant corporations like Verizon, Colgate-Palmolive, and Keller Williams.

Does purchasing my VMC at Enforcement need DMARC?

While DMARC at enforcement is required before the email client uses the VMC to display the logo, DMARC is not required to acquire a VMC.

Can I check the current state of my DMARC?

You can use various web resources to verify your BIMI record. The following options are as follows:

• https://domain-checker.valimail.com/dmarc/
• https://www.mailhardener.com/tools/dmarc-validator
• https://bimigroup.org/bimi-generator/

What's the difference between BIMI and VMC?

BIMI is the open standard that points inboxes to where your logo lives; VMC is the cryptographic assurance that your logo is really yours. Gmail and other major providers need a mark certificate to display your logo, hence, BIMI, VMC, DMARC, SPF, and DKIM are necessary.

What are the requirements to get a VMC?

Three things:

• Trademarked logo that is recorded with an accepted IP authority
• Square SVG Tiny Portable/Secure file (up to 32 KB in size, not containing scripts and fonts outlined)
• DMARC policy as p=quarantine/p=reject with SPF/DKIM implementation

Which trademark offices are accepted?

DigiCert certifies 17 IP Offices such as USPTO (United States), CIPO (Canada), EUIPO (European Union), UKIPO (United Kingdom), DPMA (Germany), JPO (Japan), IP India, IP Australia, KIPO (South Korea), INPI (Brazil & France), BOIP (Belgium-Luxembourg), and IP Offices of Spain, Denmark, Sweden, Switzerland, and New Zealand. Government organizations may also be certified through a seal.

How long does issuance take?

Usually, it takes 3 to 7 business days after the completion of the paperwork. The validation involves not only the EV-like process but also the verification of the trademark, the notarization of ID, and a short verification call using DigiCert. Certera’s professionals will help you with every part of it.

What is the validity period of a DigiCert VMC?

Up to 397 days. Subscriptions that span multiple years allow you to keep the same price, and your certificate will be renewed at no extra cost every year.

How should my logo be formatted?

SVG Tiny Portable/Secure (which is based on SVG Tiny 1.2) requires a square layout, a maximum of 32 KB in size, a solid background, vectorized fonts, and no scripts, links, or images. If your logo is in a different format, we will convert it for you at no cost.

Can one VMC cover multiple domains or subdomains?

Yes – provided that they have the same logo. One VMC is sufficient for the basic domain, as well as other domains (maximum 250). Every different-looking logo must have its separate VMC.

Is a VMC only for large enterprises?

No, because a business using its trademarked logo will benefit from this checkmark no matter the size of the organization. If you don’t have your trademark yet, begin with Common Mark Certificate.

What if I don't have DMARC or a trademark yet?

We will be there to assist you with that. We will conduct a review of your DNS, then safely take you into DMARC enforcement, convert your logo into an SVG Tiny PS file at no cost, and even direct you into the proper trademark process.