How to Get a Mark Certificate (VMC or CMC)

Become DMARC Compliant

For both VMC and CMC (if used with BIMI), your domain must have full DMARC enforcement (p=quarantine or p=reject) and consistent pass rates. DMARC works alongside SPF and DKIM, so you must set up all three.

Set up SPF

1. List all the third-party senders and IP addresses that are allowed to send email on behalf of your domain. Include company mail server, web server, marketing platforms, etc.
2. Create an SPF record and publish it in your DNS. Example:
   v=spf1 ip4:192.0.2.10 include:example.com -all

Set up DKIM

1. Choose a DKIM selector (e.g., google._domainkey for Google Workspace).
2. Generate a 2048-bit public-private key pair for your domain.
3. Publish the public key in your DNS as a TXT record. Example:
   v=DKIM1; p=YourPublicKeyHere

Set up DMARC

1. Create a DMARC TXT record with a policy of p=quarantine or p=reject.
2. Set pct=100 for full enforcement. Example:
   v=DMARC1; p=reject; rua=mailto:dmarc-reports@yourdomain.com; pct=100
3. Monitor DMARC reports for several weeks to confirm stable compliance — most CAs require this before issuing a VMC. 

Logo Registration Requirements

For VMC: Your logo must be legally trademarked and verifiable through WIPO or your country’s trademark registry.

For CMC: Trademark registration is not required. You can use an unregistered logo, but the CA will still verify that your organization owns the logo rights.

VMC Trademark Process

• Search for existing trademarks using the WIPO database or your country’s trademark registry.
• If your logo isn’t registered, file for a trademark.
• Respond promptly to trademark office queries.
• Keep a copy of the trademark registration certificate — the CA will require it.

Prepare Your Logo for BIMI

Your logo must meet BIMI format requirements:

• Format: SVG Tiny 1.2 Portable/Secure (SVG P/S) profile.
• Shape: Square (1:1 aspect ratio).
• Background: Solid color recommended for best rendering (especially in Gmail).
• Content: No scripts, embedded images, or external links.

Purchase Your Certificate

Buy DigiCert VMC Certificate from us. The Certificate Authority will perform:

• Identity verification: Physical or live video verification of the requester.
• Business validation: Checking official business records and documents.
• Domain ownership verification:
  • VMC: Confirming trademark registration matches the logo.
  • CMC: Confirming you have the legal right to use the logo.
• Logo ownership verification: Confirming trademark registration matches the logo.
• DMARC compliance review: Ensuring stable enforcement over time. 

Once approved, the CA will issue your VMC as a .pem file.

Buy Verified Mark Certificate Now
Buy Common Mark Certificate Now

Host the VMC File

• Upload the .pem file to a secure, publicly accessible HTTPS server.
• Copy the file’s direct URL — you’ll need it for the BIMI record.

Add a BIMI TXT Record to DNS

Create a BIMI TXT record for your domain containing:

• l= (URL of the hosted logo in SVG P/S format)
• a= (URL of the hosted VMC .pem file)

Example:

v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem

Insert this as a TXT record in your DNS settings.