Managing BIMI Certificate Orders with Valimail Amplify

Applies to: Valimail Essentials and Enforce (Amplify add-on required).

Overview

Valimail Amplify integrates directly with DigiCert CertCentral to provide seamless, end-to-end BIMI certificate lifecycle management. You can now request, validate, track, and deploy Verified Mark Certificates (VMC) and Common Mark Certificates (CMC) directly within the Valimail platform.

Once issued, your certificates automatically sync to your Valimail Logo Library, ready for immediate BIMI record publication.

Prerequisites

Before submitting or redeeming a certificate request in Amplify, make sure your domain and logo meet the technical requirements and you have your company and contact details prepared:

DMARC Enforcement: Your sending domain must have an active DMARC policy at full enforcement:
- p=quarantine or p=reject with pct=100
- Subdomain policy (if used) needs to be also set to sp=quarantine or sp=reject
Compliant Logo Asset: Your logo must be formatted as an SVG Tiny P/S file adhering strictly to BIMI SVG specifications. Review the full list of requirements here.
Trademark Documentation (VMC only): If applying for a VMC, your logo must be a registered trademark recognized by an approved intellectual property office. (CMC does not require a registered trademark).
Company Information.
• Company name (exactly as it appears in corporate registries),
• Company address,
• Company phone number (which must be listed in a third-party database),
• The domains the certificate will cover (They must already be in your Valimail account, because you select them from a list).
This is needed for DigiCert, the certificate authority, to confirm that your organization exists and is the one requesting the certificate. The name and address are compared with official records, so even small differences can cause a mismatch. DigiCert also calls the company phone number to check that the applicant works there, which is why the number must be one it can find in a third-party database.
Point of Contact.
• First name, last name and job title.
• Email address and phone number (extension optional).
• Role, which defaults to Verified contact.
During the verification process, DigiCert contacts the people listed as a point of contact on the order. The verified contact also receives the approval email that releases the order, so the order cannot move forward until that person responds. Choose someone who knows your company details, can answer DigiCert's questions, and monitors the mailbox you enter. You can add more than one contact if others should be reachable.

Certificate Types: VMC vs. CMC

Enforce customers can choose between a VMC (if the logo is trademarked) and a CMC. Essentials customers can order a CMC only. A VMC shows your logo plus Google's blue checkmark, and requires a registered trademark. A CMC accepts a logo that is not a registered trademark, but you must be able to prove you have used the logo for over a year, and it does not get the blue checkmark.

Feature	Verified Mark Certificate (VMC)	Common Mark Certificate (CMC)
Trademark Requirement	Registered trademark with a recognized IP office	Prior usage and domain alignment (no trademark registration needed)
Pros	Logo and Google’s Blue Checkmark show on desktop and mobile Highest security bar	No trademark required Easier to obtain
Cons	Slower to obtain (if you don’t already have the logo trademarked)	No Blue Checkmark in Gmail The logo has to have been in use for over a year
Availability	Valimail Enforce	Valimail Enforce Valimail Essentials

Step-by-Step Order Process

Expand the section corresponding to your Valimail plan to view step-by-step instructions:

Valimail Essentials

Essentials customers redeem certificates purchased upfront.

Navigate to Certificates: Log in to Essentials, expand the BIMI section from the side menu and click on Amplify. From the Amplify screen click on the Certificates tab at the top.
Redeem Certificate: Click Redeem to launch the setup wizard.
Upload Logo and give it a Name: Upload your SVG Tiny P/S logo file. Amplify automatically runs a pre-validation check against BIMI format requirements (the Valimail logo is used as an example).
If the logo doesn’t meet the format requirements, you’ll see an error explaining what needs to be fixed. You can also use our SVG fixer tool to correct the issues automatically.
Enter Company Information. DigiCert uses this information to verify that the organization legally exists and is in good standing using official government registries or approved business databases.
Note: A CMC issued for an apex (root) domain automatically covers all of its subdomains.
Enter Point of Contact Information. DigiCert contacts the listed points of contact via corporate email and verified phone numbers to confirm:
- The certificate order was genuinely authorized by the organization.
- The individuals have the legal authority to bind the organization to certificate terms.
Submit. After selecting Submit we will place the order with DigiCert, and they will begin the verification process.

Valimail Enforce

Enforce customers can initiate new certificate orders on demand directly within Amplify, which are validated by Valimail Product Support before dispatch.

Navigate to Certificates: In Valimail Enforce, click on BIMI, open Amplify, and navigate to the Certificates tab.
Redeem Certificate: Click Redeem if a certificate is included in your contract, or Order Certificate to purchase a new one.
Choose between a Verified Mark Certificates or a Common Mark Certificate: Choose a VMC if your logo has a registered trademark; otherwise, select a CMC.
Upload Logo and give it a Name: Upload your SVG Tiny P/S logo file. Amplify automatically runs a pre-validation check against BIMI format requirements (the Valimail logo is used as an example).
If the logo doesn’t meet the format requirements, you’ll see an error explaining what needs to be fixed. You can also use our SVG fixer tool to correct the issues automatically.
Enter Company Information. DigiCert uses this information to verify that the organization legally exists and is in good standing using official government registries or approved business databases.
Note: A VMC or CMC issued for an apex (root) domain automatically covers all of its subdomains.
Enter trademark information (FOR VMCs ONLY). DigiCert checks these details with the registering office.
- Set the Mark type.
- Select the Registration country or office, for example European Union (EUIPO), or United States of America (USPTO)
- Enter the Registration number exactly as it appears on the trademark registration, then select Next
Enter Point of Contact Information. DigiCert contacts the listed points of contact via corporate email and verified phone numbers to confirm:
- The certificate order was genuinely authorized by the organization.
- The individuals have the legal authority to bind the organization to certificate terms.
Order Pending Approval: Valimail Product Support will review your order details. Once approved, we will submit your order directly to DigiCert to begin the verification process.

Order Statuses & Lifecycle Management

You can monitor the status of any certificate request directly from the Certificates dashboard:

Status	Meaning	Action Required
Pending Approval (Enforce only)	Request is under review by Valimail Product Support to verify entitlements.	None; Valimail Support reviews your request.
Certificate pending	Request has been submitted to DigiCert. DigiCert is actively validating the organization/contacts.	Ensure your listed contacts respond to DigiCert verification requests.
Issued	Certificate is generated and synced to your Logo Library.	Ready to publish in your BIMI DNS record.
Action Required / Rejected	DigiCert or logo pre-validation identified an issue (e.g., non-compliant SVG, trademark discrepancy).	Click the order details to view the specific error message, adjust the asset or data, and resubmit.

Note on Cancellations: If you need to cancel a request before issuance, open the order details drawer and click Cancel.

Next Steps After Certificate Issuance

Once your VMC or CMC is issued, it is automatically added to the Amplify Logo Library. The final step is to associate the logo with your domain. Follow the steps below to complete the setup:

In Enforce or Essentials, go to BIMI in the side menu, and open Amplify.
Locate your domain in the list and click + Add Logo on the right side of the row.
Click on the logo.

If you have questions or need assistance during the order process, please reach out to us at [email protected].