Can One BIMI Certificate Be Used for Multiple Domains?
Learn when one VMC or CMC can support multiple domains, certificate scope limitations, and enterprise deployment considerations.
Multi-Domain BIMI
BIMI Across Multiple Domains, Logos and Brands
Enterprise organizations, MSPs, and holding companies face questions single-domain deployments don’t: how many certificates are needed, whether domains can share one, which to prioritize, how to handle different brand logos, and whether subdomains need separate setup.
The core rule
The number of VMC or CMC certificates you need is determined by the number of distinct logos you want to display — not the number of domains. One certificate can serve multiple domains if they all use the same logo and trademark. Each domain still needs its own BIMI DNS TXT record. Subdomains do not inherit BIMI records from parent domains.
What is your situation?
Multiple domains, same logo and trademark
One certificate can cover all of them. Each domain needs its own BIMI DNS record pointing to the shared certificate.
Multiple domains with different logos
You need one certificate per distinct logo. The number of domains doesn’t determine the count — the number of unique logos does.
Subdomains that send email
Each sending subdomain needs its own BIMI DNS record. If they use the same logo as the parent, the same certificate can be referenced.
Many domains — not sure where to start
Prioritize by send volume and DMARC enforcement status. Start with the highest-impact customer-facing domains first.
Quick Answers
How many BIMI certificates do I need?
One per distinct logo. If 10 domains all display the same logo, one certificate covers all 10. If 3 brands each have a unique logo, you need 3 certificates — regardless of how many domains each brand has.
Can subdomains reuse the parent domain’s certificate?
Yes, if the logo is the same. Subdomains do not inherit BIMI DNS records — each needs its own record — but multiple records can point to the same certificate file and SVG logo.
Can multiple brands under one holding company share a trademark?
Only if those brands share the same registered trademark. If each brand has its own distinct trademark, each requires a separate VMC. CMC (no trademark required) is an option for secondary brands that lack a registered mark.
Which domains should we deploy BIMI on first?
Prioritize domains with DMARC at enforcement (p=quarantine or p=reject) and high send volume. Customer-facing transactional domains typically deliver the most visible impact. Low-volume or internal domains can be phased in later.
Articles in This Hub
Which Domains Should Get BIMI First?
Learn how to prioritize BIMI deployment across domains based on email volume, brand visibility, risk exposure, and readiness.
What Happens If Different Domains in My Organization Use Different Logos?
Learn how BIMI handles different logos across domains, when separate certificates are required, and deployment planning considerations.
How Many BIMI Certificates Do I Need?
Determine how many BIMI certificates you need based on domains, trademarks, logo variations, business units, and deployment structure.
Do Subdomains Inherit BIMI Records or Need Separate Setups?
Understand whether BIMI records inherit to subdomains and when separate DNS records and certificates are required.
Can Multiple Domains Share the Same Trademark for BIMI?
Understand how multiple domains can use a shared trademark for BIMI and the certificate validation requirements involved.
Frequently Asked Questions
Can one BIMI certificate cover multiple domains?
A single VMC or CMC can cover multiple sending domains when those domains share the same registered trademark and the same logo. Each domain still needs its own BIMI DNS record pointing to the certificate. If domains use different logos, separate certificates are required. See Can One BIMI Certificate Cover Multiple Domains.
Do subdomains need their own BIMI setup?
Subdomains do not inherit BIMI records from a parent domain. Each subdomain that sends email requires its own BIMI DNS record. If the subdomain uses the same logo and trademark as the parent domain, the same VMC can be referenced from multiple BIMI DNS records. See Do Subdomains Inherit BIMI Records.
How should an enterprise with many domains prioritize BIMI deployment?
Prioritize BIMI deployment on your highest-volume sending domains with active DMARC enforcement already in place. After that, prioritize customer-facing transactional domains. Internal domains, subdomain senders, and low-volume domains can be addressed in later phases. See Which Domains Should Get BIMI First.