DNS Record Generator

Generate properly formatted DNS TXT records for email authentication and security.

Free trial usage: 2/2 actions left in the next 24 hours. Upgrade for unlimited

BIMI Record Generator

Display your brand logo in email clients that support BIMI (Brand Indicators for Message Identification).

Prerequisites: BIMI requires DMARC with a policy of quarantine or reject. Your logo must be in SVG Tiny PS format. Some email clients also require a VMC (Verified Mark Certificate).
Usually "default"
Must be served over HTTPS. Must be SVG Tiny PS format.
Verified Mark Certificate URL. Required by Gmail and some other providers.

VMC Certificate Guide

A Verified Mark Certificate (VMC) is a digital certificate that verifies ownership of your brand logo. It is required by Gmail and recommended by other email providers for BIMI logo display.

What is a VMC?

A VMC is an X.509 certificate issued by a Certificate Authority (CA) that binds your trademarked logo to your domain. It proves to email clients that you are the legitimate owner of the logo displayed in the inbox.

Authorized Certificate Authorities

VMCs can only be issued by CAs authorized by the BIMI working group. Currently authorized providers:

  • DigiCert — Verified Mark Certificates
  • Entrust — Verified Mark Certificates
Steps to Obtain a VMC
1. Register Your Trademark

Your logo must be a registered trademark with an approved intellectual property office (e.g., USPTO, EUIPO, UKIPO, CIPO, DPMA). The trademark registration must be active and in good standing.

2. Prepare Your Logo

Convert your logo to SVG Tiny PS (Portable/Secure) format. The logo must match your registered trademark exactly. Requirements: square aspect ratio, no external references, no scripts, SVG Tiny 1.2 profile.

3. Configure DMARC

Your domain must have a DMARC policy of p=quarantine or p=reject (not p=none). SPF and/or DKIM must be properly configured and aligned.

4. Generate a CSR

Generate a Certificate Signing Request (CSR) using OpenSSL. The Common Name (CN) should be your domain name.

openssl req -new -newkey rsa:2048 -nodes -keyout bimi.key -out bimi.csr -subj "/CN=example.com/O=Your Organization"
5. Submit to CA

Submit your CSR, trademark registration documents, and SVG logo to your chosen CA (DigiCert or Entrust). The CA will verify your trademark ownership and domain control.

6. Host Certificate and Logo

After approval, host your VMC (.pem) and SVG logo on your web server over HTTPS. Both URLs must be publicly accessible.

Example file locations:

https://example.com/.well-known/bimi/logo.svg https://example.com/.well-known/bimi/vmc.pem
Cost and Timeline

VMC certificates typically cost $1,000–$1,500/year. The verification process usually takes 2–4 weeks. Trademark registration, if not already done, can take 6–12 months.

BIMI Without a VMC

Some email clients (Apple Mail, Yahoo/AOL) support BIMI logo display without a VMC. Gmail strictly requires a VMC. You can start with BIMI without a VMC and add one later for broader support.