BIMI Mark Certificate Unreachable
The certificate URL in the BIMI record could not be retrieved over HTTPS.
Severity: Low
What does this mean?
The certificate URL in the a= tag of your BIMI record could not be retrieved over HTTPS. The request may have returned an error, been blocked, timed out, or pointed at a non-public address. Because the certificate cannot be fetched, the BIMI authority evidence cannot be verified.
Why this is a problem
Mailbox providers that require a mark certificate fetch it over HTTPS to verify your right to display the logo. If they cannot retrieve the certificate, they cannot verify that evidence, so the logo is not shown even when the BIMI record itself is valid.
What you should do
- Ensure the
a=URL is publicly reachable over HTTPS - Confirm the URL serves the PEM certificate without errors, redirects to non-public addresses, or timeouts
- Use the BIMI Validator to confirm the certificate can be fetched