What Happens If Different Domains in My Organization Use Different Logos?
If different domains within your organization use different visual logos, they cannot share a single BIMI certificate. The BIMI record points to the SVG logo with the l= tag and to the certificate/evidence file with the a= tag. The certificate validates the relationship between the organization, domain, and approved logo. Each unique logo identity requires its own separate validation path and certificate.
What Must Be Separate vs. What Can Be Shared
- Certificate (VMC or CMC) — one per distinct logo design.
- Separate validation path for each distinct logo identity.
- SVG Tiny PS file — separately hosted file per design.
- BIMI DNS record per domain, pointing to the correct certificate and logo URL.
- Web server or CDN hosting the SVG and certificate files.
- DMARC reporting infrastructure.
- Administrative access and management tooling.
Why a Certificate Cannot Cover Multiple Logo Designs
Each unique logo identity requires its own separate validation path and certificate for BIMI certificate-backed logo display. The BIMI record points to the displayed SVG logo using the l= tag and to the certificate or evidence file using the a= tag. Because the certificate validation is tied to a specific approved logo identity, materially different logo designs should use separate validation and certificate paths.
Multiple domains can be grouped on one certificate only when they all reference the exact same SVG file. If brand-a.com and brand-b.com display different logos, they each need their own certificate regardless of whether they are owned by the same parent company.
Operational Checklist for Multi-Logo Deployments
When running a multi-logo strategy across distinct company divisions, verify that your technical configuration is properly segmented:
- DNS isolation: Confirm each domain’s BIMI record points to the correct logo URL and certificate URL — cross-referencing is a common error in multi-brand setups.
- DMARC per domain: Verify each domain independently has
p=quarantineorp=reject. Organizations managing multiple brands often require centralized DMARC monitoring to maintain enforcement across all domains. - Legal entity verification: Ensure the applying entity for each certificate matches the trademark owner of record for that logo.
Frequently Asked Questions
Can subdomains display a different logo than the apex domain using the same certificate?
What if the logos are identical except for a localized text string?
Can all certificate and SVG files be hosted on the same server?
https://assets.parentcorp.com/bimi/brand-a.svg and https://assets.parentcorp.com/bimi/brand-b.pem. As long as each domain's BIMI record accurately references the correct file path for its specific logo and certificate, centralizing the hosting has no effect on BIMI validation.