| Logo | Organisation | Domains | Mark | Issuer | Valid to |
|---|---|---|---|---|---|
| Cable News Network, Inc. | cnn.com | VMC | CN=DigiCert Verified Mark Intermediate C | 2021-01-13 | |
| Comcast Cable Communications Management, LLC | emails.xfinity.com | VMC | CN=DigiCert Verified Mark Intermediate C | 2021-01-13 | |
| Twilio Inc. | sendgrid.com | VMC | CN=DigiCert Verified Mark Intermediate C | 2021-01-13 | |
| — | Cable News Network, Inc. | cnn.com | VMC | CN=DigiCert Verified Mark Intermediate C | 2021-01-09 |
| — | DigiCert, Inc. | digicert.com | VMC | CN=DigiCert Verified Mark Intermediate C | 2021-01-09 |
| Entrust Datacard Corporation | testcertificates.com | VMC | CN=Entrust Certificate Authority - VMC1, | 2020-11-20 | |
| Entrust Datacard Corporation | testcertificates.com | VMC | CN=Entrust Certificate Authority - VMC1, | 2020-11-20 | |
| Cable News Network, Inc. CNN |
cnn.com | VMC | CN=DigiCert Verified Mark Intermediate C | 2020-04-14 | |
| Cable News Network, Inc. CNN |
cnn.com | CN=DigiCert Verified Mark Intermediate C | 2020-04-01 | ||
| — | DigiCert, Inc. | CN=DigiCert Verified Mark Root CA,OU=www | 2034-09-23 | ||
| — | DigiCert, Inc. | CN=DigiCert Verified Mark Root CA,OU=www | 2049-09-23 | ||
| — | Entrust, Inc. | CN=Entrust Root Certification Authority | 2030-11-16 |
What is a mark certificate?
BIMI (Brand Indicators for Message Identification) lets a domain publish the logo a mail client may show beside its authenticated messages. Mail providers that require evidence of trademark ownership accept a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC), issued by a Mark Verifying Authority after vetting the brand and its trademark. The logo travels inside the certificate as an SVG Tiny P/S image, and the issuers publish every mark certificate to dedicated Certificate Transparency logs listed by the BIMI Group — ctlogs.dev ingests those logs (see monitored logs) separately from the TLS certificate index. Logos are re-encoded from an allow-list before display and served from a sandboxed endpoint.