What Happens If Different Domains in My Organization Use Different Logos?

Direct Answer

If different domains within your organization use different visual logos, they cannot share a single BIMI certificate. The BIMI record points to the SVG logo with the l= tag and to the certificate/evidence file with the a= tag. The certificate validates the relationship between the organization, domain, and approved logo. Each unique logo identity requires its own separate validation path and certificate.

What Must Be Separate vs. What Can Be Shared

Must Be Separate Per Logo
  • Certificate (VMC or CMC) — one per distinct logo design.
  • Separate validation path for each distinct logo identity.
  • SVG Tiny PS file — separately hosted file per design.
  • BIMI DNS record per domain, pointing to the correct certificate and logo URL.
Can Be Shared Across Brands
  • Web server or CDN hosting the SVG and certificate files.
  • DMARC reporting infrastructure.
  • Administrative access and management tooling.

Why a Certificate Cannot Cover Multiple Logo Designs

Each unique logo identity requires its own separate validation path and certificate for BIMI certificate-backed logo display. The BIMI record points to the displayed SVG logo using the l= tag and to the certificate or evidence file using the a= tag. Because the certificate validation is tied to a specific approved logo identity, materially different logo designs should use separate validation and certificate paths.

Multiple domains can be grouped on one certificate only when they all reference the exact same SVG file. If brand-a.com and brand-b.com display different logos, they each need their own certificate regardless of whether they are owned by the same parent company.

Operational Checklist for Multi-Logo Deployments

When running a multi-logo strategy across distinct company divisions, verify that your technical configuration is properly segmented:

  • DNS isolation: Confirm each domain’s BIMI record points to the correct logo URL and certificate URL — cross-referencing is a common error in multi-brand setups.
  • DMARC per domain: Verify each domain independently has p=quarantine or p=reject. Organizations managing multiple brands often require centralized DMARC monitoring to maintain enforcement across all domains.
  • Legal entity verification: Ensure the applying entity for each certificate matches the trademark owner of record for that logo.
Do not attempt to reuse a single certificate for two distinct logo treatments — for example, a dark-mode variant and a light-mode variant. The issuing CA inspects the SVG file against the validated profile. If the visual elements deviate, the application will be rejected.

Frequently Asked Questions

Can subdomains display a different logo than the apex domain using the same certificate?

No. A single certificate binds one logo. To display a different logo on a subdomain, that subdomain must reference a separate certificate or a SAN entry on a different certificate that covers that subdomain's logo. See Do Subdomains Inherit BIMI Records or Need Separate Setups? for the full subdomain mechanics.

What if the logos are identical except for a localized text string?

A localized text variation produces a different SVG file — which means a different mark. Because the file itself changes, the CA treats it as a distinct identity requiring its own validation path. Whether that also requires a separate trademark registration depends on your CA's product requirements and the nature of the variation.

Can all certificate and SVG files be hosted on the same server?

Yes. The URLs published in your BIMI DNS records can all point to a single centralized hosting location — for example, https://assets.parentcorp.com/bimi/brand-a.svg and https://assets.parentcorp.com/bimi/brand-b.pem. As long as each domain's BIMI record accurately references the correct file path for its specific logo and certificate, centralizing the hosting has no effect on BIMI validation.
Multi-Domain BIMI Hub: How Many BIMI Certificates Do I Need? — the central guide covering all multi-domain BIMI scenarios.