Invalid BIMI Mark Certificate
The referenced BIMI mark certificate is invalid.
Severity: Low
What does this mean?
The mark certificate referenced by your BIMI record — a VMC (Verified Mark Certificate) or CMC (Common Mark Certificate) — is invalid. Common causes include a certificate that has expired, is not yet valid, is missing the required BIMI Extended Key Usage or logotype extension, or does not match your domain.
Why this is a problem
Some mailbox providers, such as Gmail, require a valid mark certificate before they will display your BIMI logo. If the certificate is invalid, those providers treat the BIMI record as unverified and your logo does not appear.
What you should do
- Obtain or renew a valid VMC from an authorised issuer
- Publish its URL in the
a=tag of your BIMI record - Confirm the certificate matches your domain and carries the required BIMI extensions
- Use the BIMI Validator to confirm the certificate is accepted