1738
UK certificates
#2 globally · 8.6% of total
38.1%
Entrust-issued
663 certs requiring migration
37.5%
High-notability rate
Score ≥7 — tied global top
333
New certs 2026 YTD
Projects ~575 full year

Section 01

The UK’s Position: Advanced Adoption, Concentrated Risk

The UK’s 1738 certificates represent 8.6% of all BIMI deployments worldwide — a disproportionate share for a country with roughly 4% of global GDP. British enterprise adoption has been driven by the financial services sector, a highly competitive retail environment, and early awareness of BIMI among UK email marketing and security communities.

That maturity comes with a specific liability. Entrust’s UK penetration was deep — 663 certificates, 38.1% of the total. The global Entrust average is 21.9%. The UK’s exposure is nearly double. Every one of those certificates is now on a forced migration path as Entrust has discontinued its CA business.

Why Entrust Exited the CA Market

In November 2024, Google announced that Chrome would stop trusting new TLS/SSL certificates issued by Entrust, citing a pattern of compliance failures and mis-issuances spanning several years. Mozilla Firefox followed with an equivalent public distrust decision. Because BIMI’s Verified Mark Certificate (VMC) and Common Mark Certificate (CMC) infrastructure relies on publicly-trusted Certificate Authority roots, this browser distrust effectively ended Entrust’s ability to issue new BIMI certificates. Entrust’s last BIMI certificate was issued in May 2025. As of the July 2026 dataset snapshot, only 0 Entrust BIMI certificates remain active globally — all expire by December 2026 with no renewal path. Existing holders must migrate to DigiCert, GlobalSign, or Sectigo before their certificate’s expiry date to avoid losing their verified inbox logo.

UK-specific finding

663 UK certificates were issued by Entrust — 38.1% of the entire UK portfolio

This is the highest Entrust concentration among the top five BIMI markets globally. As these certificates expire through 2026 and 2027, every UK organisation on Entrust faces a mandatory CA migration. Unplanned migrations result in logo gaps in recipient inboxes.

Section 02

Sector Breakdown

Technology/SaaS leads UK adoption at 23.1% (401 certs), followed closely by Retail/Ecommerce at 18.5% (322) and Banking/Financial at 14.8% (258). The near-parity between Retail and Banking is distinctly British — UK retail’s sophisticated email marketing culture has driven BIMI adoption at a pace that few other markets match outside the US.

Media/Publishing at 7.5% (130 certs) is notably higher than the global average of 3.2% — a reflection of the UK’s outsized media industry. The BBC, major newspaper groups, and broadcast networks are all significant email senders with strong brand protection motivations.

UK BIMI certificates by sector vs global share
UK’s Retail and Media representation significantly exceeds global averages

UK % — Tech/SaaS: 23.1; Banking: 14.8; Retail: 18.5; Media: 7.5; Healthcare: 5.2; Travel: 2.2 | Global % — Tech/SaaS: 25.8; Banking: 16.5; Retail: 15.5; Media: 3.2; Healthcare: 5.3; Travel: 2.5
SectorUK certsUK %Global %Variance
Technology/SaaS40123.1%25.8%−-3.5pp
Banking/Financial25814.8%16.5%−-2.2pp
Retail/Ecommerce32218.5%15.5%+2.5pp ↑
Media/Publishing1307.5%3.2%+4.2pp ↑
Healthcare905.2%5.3%−-0.3pp
Travel/Hospitality382.2%2.5%+-0.3pp ↑

Section 03

Growth Trajectory

UK issuance grew from 79 certificates in 2021 to 518 in 2025 — a 556% increase over four years. The 2026 YTD pace of 333 certificates in the first half of 2026 (January 1 – July 2) projects to approximately 575 for the full year, a further 10.6% year-on-year increase. Growth is steady rather than explosive, consistent with a maturing market where early adopters are already in and mid-market organisations are following.

UK annual BIMI certificate issuances — 2020 to 2026 YTD
Consistent growth with 2025 being the strongest year on record

New certificates — 2020: 4; 2021: 79; 2022: 198; 2023: 253; 2024: 353; 2025: 518; 2026 YTD: 333

Section 04

UK vs Global Benchmark

GB United Kingdom
Total certificates1738
Global rank#2
Entrust concentration38.1% ⚠
High-notability (≥7)37.5%
CMC share5.5%
2025→2026 growth est.~10.6%
🌍 Global
Total certificates20227
Countries109
Entrust concentration21.9%
High-notability (≥7)~29.1%
CMC share9.2%
2024→2025 growth54%
UK CMC adoption below global average

The UK’s CMC share of 5.5% is below the global 9.2%. This likely reflects the UK market’s strong trademark registration culture — established British brands typically hold registered marks, which routes them to VMC rather than CMC. As smaller UK senders enter the BIMI market, CMC share should increase.

Section 05

Outlook

The UK’s near-term BIMI story is dominated by the Entrust migration. With 663 certificates requiring reissuance, the volume of UK migration activity through 2026–2027 will be significant. Organisations that have already migrated proactively are visible in the 2025–2026 DigiCert issuance data. Those that have not yet acted will face a forced migration at expiry.

Beyond migration, the UK’s next adoption wave is likely to come from mid-market retail and financial services — sectors where the largest brands have already deployed and second-tier organisations are beginning to follow. The NHS and public sector represent a largely untapped opportunity; email trust infrastructure in public health communication is increasingly a patient safety issue, not just a branding one.

Expert Interpretation

What the UK Data Tells the Rest of Europe

VMCcerts Research · UK Market Analysis

“The UK’s 38.1% Entrust concentration is the defining near-term challenge. But look past the migration story and the structural signal is positive: UK Retail adoption is running 2.5 percentage points above the global benchmark, UK Media is 2× the global share. These are not anomalies — they reflect a market where brand reputation management in the inbox is treated as serious operational infrastructure, not a nice-to-have.”

The NHS and broader public sector represent the UK’s largest untapped BIMI opportunity. With 90 Healthcare certificates against an enormous NHS email operation, the gap between email volume and BIMI deployment is wider in UK healthcare than in any comparable advanced market. Regulatory pressure on NHS email security is increasing — BIMI adoption in this sector is a matter of when, not whether.

FAQ

UK-Specific Questions

Are there UK-specific requirements for BIMI deployment?

No UK government mandate currently requires BIMI. The ICO's guidance on email security focuses on DMARC and SPF. However, NCSC's Mail Check service and Cyber Essentials guidance both recommend DMARC at enforcement — which is the prerequisite for BIMI. UK organisations completing their DMARC journey are naturally positioned for BIMI as the next step.

Why does UK Retail adoption outperform the global benchmark?

UK retail has one of the world's most competitive email marketing environments. Brands competing in UK retail have historically invested more in email optimisation — deliverability, open rates, inbox placement — than peers in most other markets. BIMI fits naturally into that investment pattern as a brand visibility and trust signal tool.

Is a UK registered trademark required, or does an EU trademark suffice?

Post-Brexit, EU trademarks (EUTMs) no longer cover the UK. For BIMI deployment targeting UK-based email recipients, a UK Intellectual Property Office (UKIPO) registration is the relevant trademark basis. Organisations with only an EUTM may need to register separately with UKIPO or use the CMC (Common Mark Certificate) path, which requires prior use rather than trademark registration.

Self-Assessment

Three Questions for UK Email Teams

1
Is your BIMI certificate issued by Entrust?
With 38.1% of UK certificates from Entrust, there is a near-1-in-2 chance your certificate is affected. Check now. Migration before expiry is straightforward. Migration after expiry creates a logo gap.
2
Is your UK trademark registered with UKIPO specifically?
Post-Brexit, EUTM registrations do not cover the UK. If your VMC was based on an EUTM and you are deploying for UK audiences, verify your trademark coverage before your next renewal.
Has your organisation looked up direct UK competitors in a BIMI DNS checker?
With 37.5% of UK certificate holders being high-notability organisations, the probability that your direct UK competitors have already deployed is above average. A 30-second DNS lookup establishes your competitive position immediately.
UK BIMI deployment and Entrust migration support
VMCcerts works with UK enterprises on BIMI deployment, Entrust migration, and ongoing lifecycle management. DigiCert, GlobalSign, and Sectigo partnerships.
Cite This Report



VMCcerts Research. (2026). UK BIMI Benchmark Report 2026 [Research Report]. VMCcerts. https://vmccerts.com/research/uk-bimi-benchmark-report-2026
VMCcerts Research. “UK BIMI Benchmark Report 2026.” VMCcerts, 2026, https://vmccerts.com/research/uk-bimi-benchmark-report-2026.
@techreport{vmccerts2026UKBIMIBenchmark,
author = {VMCcerts Research},
title = {UK BIMI Benchmark Report 2026},
institution = {VMCcerts},
year = {2026},
url = {https://vmccerts.com/research/uk-bimi-benchmark-report-2026},
note = {Dataset: VMCcerts BIMI Dataset v2026.2. Snapshot: 2026-07-02.}
}
TY – RPRT
AU – VMCcerts Research
TI – UK BIMI Benchmark Report 2026
PY – 2026
PB – VMCcerts
UR – https://vmccerts.com/research/uk-bimi-benchmark-report-2026
ER –