Which certification authorities are recommended for BIMI VMC authentication?

Summary

Implementing BIMI to display a brand's logo in email inboxes requires a Verified Mark Certificate (VMC) from an approved certification authority. DigiCert and Entrust are the most commonly recommended authorities. Some providers, like Valimail and Red Sift, resell VMCs and offer associated services, while others, like Namecheap, offer setup assistance. A VMC validates the logo's trademark and authenticity, enhancing brand recognition and trust. While choosing a provider, one should consider factors such as communication quality, pricing, and additional services offered.

Key findings

  • VMC is Essential: A Verified Mark Certificate (VMC) is mandatory for implementing BIMI and displaying a brand's logo.
  • Top Certification Authorities: DigiCert and Entrust are the primary recommended certification authorities for obtaining VMCs.
  • Reseller Options: Companies like Valimail and Red Sift offer VMCs as part of their BIMI-related services.
  • BIMI Benefits: BIMI enhances brand recognition and trust in email communications by displaying verified logos.

Key considerations

  • Communication Quality: Some sources suggest that DigiCert may have better communication than Entrust.
  • Service Suitability: Valimail's services are primarily geared toward larger enterprises.
  • Technical Requirements: Ensure compliance with the technical requirements for both the VMC and the logo to ensure BIMI implementation.
  • Pricing Comparison: Compare pricing between purchasing directly from a certification authority versus using a reseller.

What email marketers say
10Marketer opinions

Implementing BIMI (Brand Indicators for Message Identification) to display a brand's logo in email inboxes requires a Verified Mark Certificate (VMC). DigiCert and Entrust are the primary recommended certification authorities. Some providers, such as Red Sift and Valimail, resell VMCs and offer related services, while others such as Namecheap offer services to help set up BIMI. The VMC validates the trademarked logo's ownership and authenticity, improving brand visibility and trust. Communication quality and service offerings may vary between authorities and resellers.

Key opinions

  • VMC Requirement: A Verified Mark Certificate (VMC) is essential for BIMI implementation to display a brand's logo in email inboxes.
  • Recommended CAs: DigiCert and Entrust are the most frequently recommended certification authorities for obtaining VMCs.
  • Reseller Options: Companies like Red Sift and Valimail resell VMCs, potentially offering additional services and support.
  • BIMI Benefits: BIMI with a VMC enhances brand recognition, improves trust, and provides a more secure email experience.

Key considerations

  • Communication Quality: Consider the communication quality of the certification authority, as some users have reported issues with Entrust.
  • Service Offerings: Evaluate the service offerings of resellers like Red Sift and Valimail, as they may provide additional support for BIMI implementation.
  • Pricing: Compare pricing between direct certification authorities and resellers to find the most cost-effective solution.
  • Setup Complexity: BIMI implementation requires proper DNS records and technical setup. Consider services that simplify this process.
Marketer view

Email marketer from Email Geeks mentions they resell VMCs without requiring Red Sift and offer white-glove service at the same price as Entrust.

May 2022 - Email Geeks
Marketer view

Email marketer from Valimail.com responds by stating that to implement BIMI, a VMC from a recognized provider like DigiCert or Entrust is required, alongside proper DNS records for authentication. Valimail provides services related to email authentication that support BIMI.

April 2021 - Valimail.com
Marketer view

Email marketer from Email Geeks suggests Digicert over Entrust due to communication issues but recommends using a reseller like Al Iverson if the markup is reasonable.

October 2021 - Email Geeks
Marketer view

Email marketer from Namecheap explains that BIMI requires a VMC from a trusted Certificate Authority to display your logo securely. They list DigiCert as a provider. They also offer services to help setup BIMI.

April 2023 - Namecheap.com
Marketer view

Email marketer from Email Geeks shares that their company resells Entrust VMCs.

May 2024 - Email Geeks
Marketer view

Email marketer from Entrust.com shares that BIMI with a VMC helps organizations display their trademarked logo in email inboxes, improving brand visibility and providing a more secure and trustworthy email experience for recipients. Entrust is a certificate authority that issues VMCs.

October 2022 - Entrust.com
Marketer view

Email marketer from Mailhardener explains that to setup BIMI you need a VMC which can be purchased from certificate authorities such as Digicert or Entrust. A VMC allows you to display a logo alongside your authenticated emails, boosting brand recognition and trust.

June 2023 - Mailhardener.com
Marketer view

Email marketer from EasyDMARC explains that BIMI helps display the brand logo, but to achieve this, a VMC (Verified Mark Certificate) from a certified authority like DigiCert or Entrust is necessary.

August 2023 - EasyDMARC.com
Marketer view

Email marketer from DigiCert.com explains that a Verified Mark Certificate (VMC) is required to display your logo next to your emails in supporting inboxes, which enhances brand recognition and trust. DigiCert is a recognized provider of these certificates.

March 2021 - DigiCert.com
Marketer view

Email marketer from Red Sift mentions that you need a VMC (Verified Mark Certificate) from an approved Certification Authority (CA) like DigiCert or Entrust to be fully compliant with BIMI standards. They offer services to help with the BIMI setup, including VMC procurement.

June 2023 - Red Sift

What the experts say
3Expert opinions

DigiCert and Entrust are recommended certification authorities for obtaining Verified Mark Certificates (VMCs) required for BIMI (Brand Indicators for Message Identification) implementation. These certificates enable brands to display their logo alongside authenticated emails, enhancing trust and recognition. Valimail resells DigiCert VMCs, but primarily caters to larger enterprises, although they can still answer general questions.

Key opinions

  • Key CAs: DigiCert and Entrust are the primary recommended certification authorities for BIMI VMC.
  • VMC Purpose: VMCs enable brands to display their logo in authenticated emails, improving trust and recognition.
  • Valimail's Role: Valimail resells DigiCert VMCs and provides services related to email authentication, but focuses on larger businesses.

Key considerations

  • Enterprise Focus: Valimail's services are geared towards larger enterprises, which might not be the best fit for smaller organizations.
  • Certification Authority Choice: Consider the specific needs and requirements of your organization when choosing between DigiCert and Entrust.
  • Trust and Recognition: Implementing BIMI with a VMC can significantly improve email recipient trust and brand recognition.
Expert view

Expert from Word to the Wise explains that BIMI requires a VMC from a supported certificate authority like DigiCert or Entrust. It's a mechanism to display a brand's logo next to authenticated emails, helping improve trust and brand recognition.

October 2023 - Word to the Wise
Expert view

Expert from Email Geeks clarifies that Valimail is aimed at larger enterprises regarding BIMI, but is happy to answer questions.

June 2022 - Email Geeks
Expert view

Expert from Email Geeks shares that Digicert and Entrust are certification authorities for BIMI VMC. Valimail resells Digicert VMC and CMC.

May 2023 - Email Geeks

What the documentation says
3Technical articles

To implement BIMI and display a brand's logo in email inboxes, a Verified Mark Certificate (VMC) from an approved certification authority is essential. The VMC validates the trademark and authenticity of the logo. Official documentation emphasizes that only authorized certification authorities can issue VMCs, and that technical requirements must be met for both the VMC and the logo. GlobalSign offers SSL certificates but redirects to DigiCert for VMCs.

Key findings

  • VMC Requirement: A VMC is mandatory for BIMI implementation to validate logo ownership and authenticity.
  • Approved Authorities: VMCs can only be issued by authorized certification authorities.
  • Technical Specs: Specific technical requirements must be met for both the VMC and the associated logo to be BIMI compliant.
  • GlobalSign Redirection: GlobalSign, while offering SSL certificates, redirects users to DigiCert for obtaining VMCs.

Key considerations

  • Authority Approval: Ensure that the chosen certification authority is officially approved to issue VMCs for BIMI.
  • Technical Compliance: Adhere to the specific technical requirements for the VMC and logo to ensure proper BIMI implementation.
  • SSL Certificates vs. VMCs: Note that SSL certificates, while important for email security, are distinct from VMCs, which are specifically for BIMI logo validation.
Technical article

Documentation from BIMI Group explains that to use BIMI, you need a VMC from an approved certification authority to validate ownership of your logo. The documentation outlines specific technical requirements for the VMC and associated logo.

September 2022 - BIMI Group
Technical article

Documentation from GlobalSign explains the steps to implement BIMI, highlighting the necessity of a VMC obtained from a recognized Certificate Authority to authenticate brand logos. They offer SSL certificates but redirect to DigiCert for VMCs.

January 2025 - GlobalSign
Technical article

Documentation from Sectigo.com explains that a VMC is checked to validate the trademark and authenticity of the logo displayed in BIMI-enabled email clients. It emphasizes that only authorized certification authorities can issue VMCs.

April 2023 - Sectigo.com