Looking for competitive CMC and VMC certificates in 2026? We hear you.

You’ve configured DMARC at p=reject. Your SPF is aligned. Your DKIM signs correctly.

There’s only one thing missing to display your logo in Gmail, Yahoo, and Apple Mail: a CMC or VMC (Verified Mark Certificate).

And that’s exactly what this article is about.

In a few weeks, you’ll be able to order your VMC or CMC certificate directly from your DMARCTrust dashboard. No more navigating between three different vendors, no more copy-pasting cryptic files. We handle everything.

The offering is currently being tested with a few pilot customers. But before we reveal the commercial details, let us explain what you’re actually buying.

1. BIMI in 30 seconds: why a certificate?

BIMI (Brand Indicators for Message Identification) allows you to display your logo next to your emails in compatible inboxes.

The problem is that anyone can host an SVG file and declare “Here’s my BIMI logo.” Without validation, an attacker could visually impersonate your brand.

The solution is a VMC (or CMC for “Common Mark Certificate”), which proves that you are the legitimate owner of the trademark associated with the logo. It’s a cryptographic attestation issued by an accredited certification authority.

Without this certificate, Gmail and others will ignore your BIMI record. With it, your logo displays.

2. VMC vs. CMC: what’s the difference?

Two terms are circulating. Here’s the clarification:

• VMC (Verified Mark Certificate): The official term used by DigiCert, Entrust, and legacy CAs. It’s the X.509 standard with BIMI extension. Requires a registered trademark.
• CMC (Common Mark Certificate): A newer option that doesn’t require trademark registration. Functionally similar but with a simplified validation process.

Both achieve the same result: displaying your logo in email clients. We’ll use “VMC” throughout this article, but our CA partners may offer one or the other depending on your needs.

3. What a VMC certificate contains

A VMC is a specialized X.509 certificate containing:

1. The applicant’s identity: legal name of your company (as registered with the business registry)
2. The SVG logo hash: a cryptographic fingerprint of your BIMI logo file
3. Your trademark reference: registration number with EUIPO, USPTO, WIPO, or other national office
4. The public key used to verify the certificate signature
5. The certification authority’s signature

4. The usual process (and why it’s tedious)

Today, obtaining a VMC looks like this:

Step 1: Register your trademark (for VMC)

If not already done, you must register your logo as a trademark with EUIPO (Europe), INPI (France), USPTO (USA), or WIPO (international). This process takes 6 to 12 months and costs between $900 and $5,500.

Step 2: Prepare your BIMI logo (for CMC and VMC)

The logo must be an SVG Tiny PS (Portable/Secure). No JavaScript, no external references, no forbidden tags. You often need to hire a designer to convert your logo, or use our free BIMI Tiny-PS Converter.

Step 3: Request the Mark Certificate

You go to a CA’s website (DigiCert, Sectigo…), fill out a form, and upload:

• Your SVG file
• Your trademark registration proof
• Your company identity documents (articles of incorporation, bylaws…)

Step 4: Legal and technical validation

The certification authority verifies:

• That your company legally exists
• That you are indeed the trademark holder
• That the SVG logo matches the registered trademark
• That the SVG file complies with BIMI specifications

This process takes between 2 and 6 weeks.

Step 5: Installation

You receive the certificate. You must then:

• Host the .pem file on your domain or use your CA’s URLs
• Create the BIMI DNS record with a= pointing to the certificate
• Test with Google/Yahoo and tech tools

The result is a long, technical, and fragmented process. You’re juggling between your trademark agent, your SVG designer, and the certification authority. The slightest error (wrong SVG format, unrecognized trademark) extends the process by several weeks.

5. Our approach: everything from DMARCTrust

Here’s what we’re preparing:

From your dashboard, you specify your domain and upload your logo with one click. We verify BIMI compliance before even submitting to the CA.

We handle communication with our partner CAs, so you don’t need to create an account with them. A status dashboard shows you where your request stands (trademark validation, company validation, issuance).

The certificate is automatically hosted. No .pem file to upload manually. We generate the final BIMI record. You copy it into your DNS, and you’re done.

You must still have a registered trademark for a VMC. We can’t bypass this legal requirement. But we simplify everything else.

6. Indicative pricing and availability

VMC certificates currently cost between $1,300 and $2,000 per year (depending on the CA and volume).

Our goal is to offer competitive pricing with more services.

We’re currently in a testing phase with 5 pilot customers (multinationals and SMBs). December and January are for feedback collection and workflow adjustments. Online ordering opens for all customers in February 2026.

We’ll publish final pricing details by the end of January.

7. Anticipated FAQ

Q: Can I use BIMI without a CMC/VMC?

Technically yes, but Gmail, Yahoo, and Apple Mail won’t display your logo. Only a few small providers accept BIMI without a certificate. For high volumes (B2B, e-commerce), the VMC is essential.

Q: My current logo is a PNG. Does that work?

No. BIMI requires an SVG Tiny PS. We offer a conversion service from SVG-vectorized files to SVG Tiny-PS (included or optional depending on your plan).

Q: What happens if my trademark is rejected by the CA?

We’ll notify you immediately with the rejection reasons. In 90% of cases, it’s a matter of missing documentation or mismatch between the SVG logo and the registered trademark. We’ll guide you to correct it.

Conclusion

BIMI is an excellent technology. But its adoption stagnates because the CMC/VMC process is absurdly complex for an SMB or an already overloaded IT team.

Our mission at DMARCTrust has always been to make DMARC accessible. With this new offering, we’re extending that philosophy to BIMI.

Want to be among the first notified when the offering is available? Contact us at team@dmarctrust.com with “BIMI VMC” in the subject line. We’ll add you to the priority notification list.

In the meantime, make sure your DMARC is at p=reject. That’s the #1 prerequisite for BIMI. Use our free DMARC checker to verify your current status.

---

This article will be updated with final pricing details in Q1 2026.