BIMI mark certificates.

Verified and Common Mark Certificates from the BIMI mark-certificate logs — the brand logos mail clients show next to authenticated mail, with the domains and the trademark each one was issued for.

Latest marks · page 472 · 354 ms

LogoOrganisationDomainsMarkIssuerValid to
Cable News Network, Inc. cnn.com VMC CN=DigiCert Verified Mark Intermediate C 2021-01-13
Comcast Cable Communications Management, LLC emails.xfinity.com VMC CN=DigiCert Verified Mark Intermediate C 2021-01-13
Twilio Inc. sendgrid.com VMC CN=DigiCert Verified Mark Intermediate C 2021-01-13
— Cable News Network, Inc. cnn.com VMC CN=DigiCert Verified Mark Intermediate C 2021-01-09
— DigiCert, Inc. digicert.com VMC CN=DigiCert Verified Mark Intermediate C 2021-01-09
Entrust Datacard Corporation testcertificates.com VMC CN=Entrust Certificate Authority - VMC1, 2020-11-20
Entrust Datacard Corporation testcertificates.com VMC CN=Entrust Certificate Authority - VMC1, 2020-11-20
Cable News Network, Inc.
CNN
cnn.com VMC CN=DigiCert Verified Mark Intermediate C 2020-04-14
Cable News Network, Inc.
CNN
cnn.com CN=DigiCert Verified Mark Intermediate C 2020-04-01
— DigiCert, Inc. CN=DigiCert Verified Mark Root CA,OU=www 2034-09-23
— DigiCert, Inc. CN=DigiCert Verified Mark Root CA,OU=www 2049-09-23
— Entrust, Inc. CN=Entrust Root Certification Authority 2030-11-16

← Newer

What is a mark certificate?

BIMI (Brand Indicators for Message Identification) lets a domain publish the logo a mail client may show beside its authenticated messages. Mail providers that require evidence of trademark ownership accept a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC), issued by a Mark Verifying Authority after vetting the brand and its trademark. The logo travels inside the certificate as an SVG Tiny P/S image, and the issuers publish every mark certificate to dedicated Certificate Transparency logs listed by the BIMI Group — ctlogs.dev ingests those logs (see monitored logs) separately from the TLS certificate index. Logos are re-encoded from an allow-list before display and served from a sandboxed endpoint.