Question 1

What is a VMC certificate?

Accepted Answer

A VMC (Verified Mark Certificate) is a digital certificate that allows organizations to display their brand logo in email clients that support BIMI (Brand Indicators for Message Identification). It provides cryptographic proof that the logo is authorized by the brand owner.

Question 2

Which Certificate Authorities issue VMC certificates?

Accepted Answer

VMC certificates are issued by five authorized Certificate Authorities: DigiCert, Entrust, Sectigo, GlobalSign, and SwissSign. These CAs are approved by the AuthIndicators Working Group.

Question 3

How long does a VMC certificate last?

Accepted Answer

VMC certificates are typically valid for 1 year. Organizations must renew their certificates before expiration to maintain BIMI logo display in email clients.

Question 4

What is BIMI?

Accepted Answer

BIMI (Brand Indicators for Message Identification) is an email specification that allows organizations to display their brand logo next to authenticated emails in supported email clients. It requires DMARC enforcement and a VMC certificate.

Question 5

How do I get a VMC certificate?

Accepted Answer

To obtain a VMC certificate, you need to: 1) Have a registered trademark for your logo, 2) Implement DMARC with enforcement policy (quarantine or reject), 3) Apply for a VMC certificate from an authorized CA, 4) Publish your BIMI record in DNS.

Frequently Asked Questions

What is BIMI and why should my organization use it?

How do VMC certificates protect my brand from email phishing?

What is the difference between VMC and CMC certificates?

How long does it take to implement BIMI with VMC certificates?

Do I need DMARC before implementing BIMI?

Which email providers support BIMI logo display?

What are the costs associated with BIMI and VMC implementation?

Can BIMI improve my email deliverability and open rates?

What happens if my VMC certificate expires?

How does BIMI relate to other email authentication standards like SPF and DKIM?

How does VMC Certificate Monitor work?

Which Certificate Authorities do you monitor?

Can I monitor my organization's certificates?

How can I check if my domain has BIMI configured?

What are the requirements for BIMI implementation?