Separate the certificate from the display decision

A mark certificate binds validated organization/domain rights to a logo representation. A VMC is generally based on a registered trademark. A CMC can support eligible marks that do not use the same trademark basis and may allow defined variations, subject to issuer and provider rules. Both involve independent validation by a Mark Verifying Authority.

Neither certificate forces a mailbox provider to display the logo. Providers choose accepted certificate classes, issuers, authentication requirements, reputation thresholds, clients, and user-interface locations. Self-asserted BIMI also has limited and provider-specific support.

Start with a provider matrix

For each important mailbox provider, record the official support page, certificate requirement, accepted type/issuer information, DMARC/authentication prerequisites, and date checked. Avoid relying on a certificate seller’s broad compatibility claim as the only source.

Then ask accepted issuers about:

  • eligible organization and jurisdictions;
  • trademark or prior-use evidence;
  • exact logo variations permitted;
  • domain validation and authorized contacts;
  • certificate lifetime, renewal, revocation, and reissue;
  • file delivery and hosting requirements;
  • total cost and lead time.

Legal and brand teams should confirm rights. Technical staff should not represent that a logo qualifies without their evidence.

Keep image and certificate synchronized

Use the exact approved SVG Tiny P/S artwork in the certificate workflow. Record its checksum. After issuance, inspect the certificate chain and logo representation using approved tooling, and verify that covered domains and validity dates match the launch plan.

Host the PEM evidence document at a stable HTTPS URL with the required content type and public access. Point the BIMI a= attribute to that file and l= to the corresponding SVG. Changing the logo, organization, domain scope, or file may require reissue; ask the issuer rather than guessing.

Make the procurement decision

Summarize coverage gained, providers still unsupported, operational renewal work, legal evidence, and cost. A CMC may be appropriate where its evidence model and target-provider acceptance fit; a VMC may be required for other provider/mark combinations. The correct choice is not universal.

Launch only after fresh aligned mail, DNS, asset, certificate, and provider observations pass. Describe the result as eligibility and observed display at named providers—not guaranteed display or improved deliverability.