How can I check if a domain uses Entrust or Digicert for BIMI, and should I avoid Entrust?

Email marketer from EmailToolTester clarifies that BIMI relies on having a valid VMC issued by a trusted certificate authority and setting up the correct DNS records to authenticate the brand's logo and ensure it is displayed in email inboxes.

Email marketer from OnlyMyEmail recommends that to check a BIMI record for the VMC, it is recommended to inspect the DNS records of the domain and check the URL to see if it is valid.

Email marketer from BIMI Group provides a list of approved VMC (Verified Mark Certificate) issuers. The BIMI Group recommends that email senders choose from the approved VMC list for BIMI implementation.

Email marketer from Stack Overflow explains that you can verify the issuer of the Verified Mark Certificate (VMC) by checking the certificate details after fetching it from the BIMI record. You can use tools like OpenSSL to inspect the certificate.

Marketer from Email Geeks shares that you can manually get the certificate and inspect it, using `openssl x509 -in certificate.crt -text -noout` or finding a website to do it for you.

Email marketer from Reddit shares that DigiCert and Entrust are common choices for VMC issuers, but one should verify compatibility with the email provider's requirements. Also should keep up to date with any news of distrust of the certificate authorities.

Email marketer from Mailhardener advises monitoring news and announcements regarding the trustworthiness and compliance of different VMC issuers like Entrust, as decisions from major email providers can impact the validity of certificates.

Marketer from Email Geeks shares Google's statement on Entrust VMCs and that they are currently working internally to assess the situation, with the intent of choosing a path that takes into account the relevant use cases in Gmail while upholding the safety and security of its users.

Email marketer from VMC Authority shares that using a VMC improves brand trust, customer engagement, and email security, suggesting that organizations obtain VMCs from reputable CAs to leverage these benefits.

Email marketer from Proofpoint emphasizes that BIMI enhances email security and brand visibility, recommending organizations implement BIMI with VMCs from trusted CAs to protect their brand reputation.

Expert from Email Geeks shares that aboutmy.email will pull the BIMI data, including the cert issuer and that most BIMI-specific tools would too.

Expert from Email Geeks explains that Google's Chrome team views Encert as intentionally violating CA requirements and breaking rules, leading to the potential "certificate authority death penalty".

Expert from Email Geeks shares his belief that Encert will improve but suggests that anyone concerned about security should avoid them in the near future.

Expert from Word to the Wise responds that there are no trusted root issues with Entrust and BIMI, however there are other good reasons to distrust them, but it is very unlikely to affect BIMI.

Expert from Email Geeks suggests everyone should understand the process and costs involved in switching vendors. He also states that nobody will be criticised for choosing DigiCert.

Expert from Email Geeks explains how to use dig and curl commands to extract the issuer information from a BIMI record. He provides the commands and explains that default is the BIMI selector.

Documentation from Sectigo explains that a VMC (Verified Mark Certificate) is essential for BIMI implementation and outlines the steps to acquire and implement a VMC to display brand logos in supporting email clients.

Documentation from Entrust describes their VMC (Verified Mark Certificate) offering for BIMI, emphasizing that their certificates help organizations display their logos in email inboxes. The Entrust Documentation explains their approach to providing VMCs and how they align with BIMI standards.

Documentation from DigiCert outlines the requirements for a Verified Mark Certificate (VMC), stating that it must be issued by a recognized Certificate Authority and meet specific standards to be valid for BIMI.