Back to Blog
Email Security

BIMI Certificates in 2026: VMC vs CMC Pricing and Which One You Need

IntoDNS.AIApril 4, 2026

BIMI Certificates: The Landscape Has Changed

Until recently, getting your brand logo in Gmail required a Verified Mark Certificate (VMC) at $1,500/year plus a registered trademark. That was a dealbreaker for most small and mid-size businesses.

In 2024, the BIMI Group introduced Common Mark Certificates (CMC) — a more accessible alternative that doesn't require a trademark and costs significantly less. This changes the equation for everyone considering BIMI.

BIMI certificate comparison: VMC vs CMC pricing and features for 2026
VMC vs CMC: the full comparison at a glance

VMC vs CMC: The Key Differences

FeatureCMC (Common Mark)VMC (Verified Mark)
Price range$650 – $1,100/year$1,499/year
Trademark requiredNoYes (registered)
Logo in GmailYesYes
Blue checkmark in GmailNoYes
Verification levelDomain ownershipTrademark + domain
Logo proof required1 year of logo usageRegistered trademark certificate
Issued byDigiCertDigiCert, Entrust
Time to obtainDays to weeksWeeks to months

The critical difference: both CMC and VMC display your logo in Gmail. The VMC adds a blue verified checkmark, while the CMC shows the logo without that badge. For most businesses, the logo visibility is what matters — the checkmark is a nice-to-have.

Real Pricing: Where to Buy BIMI Certificates in 2026

CMC (Common Mark Certificate)

ProviderAnnual PriceNotes
SSL2BUY$650/yearCheapest option, DigiCert issued
VMCCerts.com$749/yearCMC + setup support
The SSL Store$1,089/yearDigiCert reseller
DigiCert (direct)~$1,100/yearBuy directly from the CA

VMC (Verified Mark Certificate)

ProviderAnnual PriceNotes
DigiCert$1,499/yearDirect from CA
Entrust$1,499/yearDirect from CA
SSL2BUY$780/yearDiscounted VMC via DigiCert

Note: VMC prices through resellers can be significantly lower than direct pricing. Always compare before purchasing.

When to Choose a CMC

A Common Mark Certificate is the right choice when:

  • You don't have a registered trademark — CMC only requires proof of 1 year of logo usage, not a trademark certificate
  • Budget matters — starting at $650/year vs $1,499 for a VMC
  • You want Gmail visibility fast — CMC verification takes days, not months
  • The blue checkmark isn't critical — your recipients care about seeing your logo, not a verification badge
  • You're a small or mid-size business — the cost savings are meaningful at smaller scale

CMC ROI Example

For a business sending 10,000 emails per month:

  • CMC cost: $650/year = $54/month
  • Gmail recipients (est. 45%): 4,500/month
  • Cost per Gmail logo impression: $0.012
  • Annual impressions: 54,000 Gmail logo displays

If BIMI improves open rates by even 5%, and your average email drives $0.10 in value, that's $270/year in additional engagement — nearly covering the certificate cost.

When to Choose a VMC

Invest in a Verified Mark Certificate when:

  • You already have a registered trademark — the biggest barrier is already handled
  • Brand trust is revenue-critical — finance, healthcare, e-commerce where the blue checkmark signals legitimacy
  • High email volume — at 100K+ emails/month, the per-impression cost becomes negligible
  • You're fighting brand impersonation — the verified badge helps recipients distinguish your real emails from phishing attempts
  • Enterprise compliance requirements — some organizations require the highest level of brand verification

When You Need Neither

You can skip both certificates entirely if:

  • B2B with Outlook-heavy audience — Microsoft Outlook doesn't support BIMI at all yet
  • Under 1,000 emails per month — the per-impression cost is too high to justify any certificate
  • Testing phase — implement BIMI without a certificate first. Your logo still displays in Apple Mail (58% of mobile opens), Yahoo Mail, and Fastmail

Apple Mail alone makes the no-certificate approach viable for many businesses. Set up your BIMI record, host your SVG logo, and measure the impact before spending on a certificate.

How to Set Up a CMC: Step by Step

  1. Verify your prerequisites — run a scan on IntoDNS.AI to confirm your SPF, DKIM, and DMARC (must be p=quarantine or p=reject) are properly configured
  2. Prepare your logo — convert to SVG Tiny 1.2 PS format, square, under 32KB, solid background (see our step-by-step BIMI setup guide for detailed logo requirements)
  3. Host your logo — upload to an HTTPS URL on your domain (e.g., https://yourdomain.com/.well-known/bimi/logo.svg)
  4. Purchase the CMC — go through domain validation with your chosen provider
  5. Host the certificate — upload the PEM file to your domain
  6. Update your BIMI DNS record — use our BIMI Record Generator or manually add the a= parameter pointing to your certificate:
; Before (no certificate)
default._bimi.yourdomain.com. IN TXT "v=BIMI1; l=https://yourdomain.com/.well-known/bimi/logo.svg;"

; After (with CMC)
default._bimi.yourdomain.com. IN TXT "v=BIMI1; l=https://yourdomain.com/.well-known/bimi/logo.svg; a=https://yourdomain.com/.well-known/bimi/certificate.pem"
  1. Wait for propagation — DNS changes take up to 48 hours, Gmail caching can take up to a week
  2. Verify — send a test email to a Gmail account and check for your logo

The Smart Path for Most Businesses

Here's the approach we recommend:

  1. Start free — set up BIMI without any certificate. Get your logo showing in Apple Mail and Yahoo
  2. Measure impact — track open rates and engagement for 1-2 months
  3. Add a CMC ($650/year) — when you're ready for Gmail coverage without the trademark requirement
  4. Upgrade to VMC ($1,499/year) — only if you have a trademark and need the blue checkmark for brand trust

This phased approach means you never overspend, and each investment is backed by data from the previous stage.

Bottom Line

The introduction of Common Mark Certificates has made BIMI accessible to businesses of all sizes. You no longer need $1,500 and a trademark to get your logo in Gmail. A CMC starting at $650/year with just domain verification gets you there.

Check your current BIMI readiness with IntoDNS.AI's email security scanner — it will tell you exactly what's in place and what's missing before you invest in a certificate.

Continue Reading

Share this article