Verified Mark Certificate vs Common Mark Certificate: Choosing the Right One
by
Last Updated: 7 min read
Key Takeaways
- VMC requires a registered trademark. Brands must register their logo with authorities such as the USPTO or EUIPO to qualify.
- VMC enables the Gmail blue verified checkmark. Gmail displays this badge only for senders with a Verified Mark Certificate.
- CMC does not require a trademark. Certificate Authorities validate the logo using proof of public use for at least 12 months.
- Both certificates require DMARC enforcement. Set a DMARC policy to p=quarantine or p=reject with proper SPF and DKIM alignment.
- VMC offers maximum brand trust, while CMC offers faster access. VMC typically takes 2–4 weeks to issue, while CMC often issues within 5–10 days.
Your email logo is more than just a tiny image; it is your brand’s digital handshake. In a crowded inbox, that visual cue determines whether a recipient trusts your message or marks it as spam. To display your logo through BIMI (Brand Indicators for Message Identification), you need more than just a high-res file; you need the right certificate.
Whether you are an enterprise seeking the ultimate “Blue Checkmark” status or a growing brand looking for a faster way to stand out, the choice between a Verified Mark Certificate (VMC) and a Common Mark Certificate (CMC) is your first step toward inbox authority.
What is a VMC?
A Verified Mark Certificate is a high-assurance digital certificate that validates logo ownership. It is the original certificate type for the BIMI standard. To get a VMC, a brand must have a registered trademark for its logo with an official office, such as the USPTO in the United States or the EUIPO in Europe.
A VMC is the requirement for the blue verified checkmark in Gmail. This checkmark tells users that a sender is legitimate and has passed a strict identity check. Major authorities like GlobalSign, DigiCert, and Entrust provide these certificates. Large brands that hold registered trademarks and want the highest visibility in Gmail use these to protect their reputation. The process involves a manual review of legal documents to confirm that the brand owns the mark.
What is a CMC?
A Common Mark Certificate is a newer certificate type that makes BIMI accessible to more organizations. A CMC does not require a registered trademark. Instead, it validates a logo based on prior use. Usually, the logo must be in public use for twelve months or more to qualify.
It allows a logo to appear in many inboxes. However, it does not grant the blue checkmark in Gmail. Authorities like GlobalSign, SSL.com, and DigiCert provide these. Small businesses or startups that have a brand identity but no legal trademark registration yet find this useful. This certificate type allows these smaller brands to enjoy the visual benefits of BIMI while they wait for legal trademark approval.
Key Differences Between VMC and CMC
| Feature | Verified Mark Certificate | Common Mark Certificate |
|---|---|---|
| Trademark Status | Registered Trademark Required | No Trademark Required |
| Gmail Blue Checkmark | Eligible | Not Eligible |
| Validation Method | Legal Trademark Review | Proof of Use for Twelve Months |
| Issuance Time | Two to four weeks | Five to ten days |
| Typical Cost | Higher Price Point | Lower Price Point |
| Providers | GlobalSign, Sectigo, Entrust | GlobalSign, SSL.com, DigiCert |
VMC vs CMC: Which Certificate Fits You
Your choice depends on your business goals and legal status. You should review your current intellectual property status before you start the process.
Check Trademark Status
If your logo has a registration with a national office, a VMC is the best choice. It unlocks all BIMI benefits and ensures that your brand looks professional in Gmail.
Define Your Goals
Is the Gmail blue checkmark a priority for your marketing? If so, VMC is the only option. If you only want a logo in the inbox without the checkmark, a CMC is an effective alternative.
Evaluate Urgency
VMC verification can take a month because the review is manual and thorough. CMCs are faster to get. This makes them ideal for brands that want a quick setup for a holiday campaign or a new launch.
DMARC Status
You must have a DMARC policy at quarantine or reject for either certificate to work. Without this, mailbox providers will ignore your logo file.
How PowerDMARC Helps
PowerDMARC simplifies the complex technical path to BIMI implementation. The platform acts as a bridge between your current email setup and the official certificate authorities. It removes the need for manual record updates and deep technical knowledge.
End-to-end Certificate Procurement and Installation
You can purchase both VMC and CMC directly through PowerDMARC by contacting us. This saves time because you do not manage multiple vendor relationships. The platform coordinates with trusted certificate authorities like GlobalSign to ensure your application moves forward without delays.
Protocol Alignment and Readiness
We ensure your SPF and DKIM records are correct and aligned. This is a strict requirement for any mark certificate to function. Our DMARC analyzer helps you reach a policy of quarantine or reject. This is the baseline for BIMI eligibility.
BIMI Record Hosting and Management
With PowerBIMI, PowerDMARC hosts your BIMI records and logo files on a secure network. It ensures your logo meets the strict SVG Tiny 1.2 format requirements. This format is mandatory for inbox display, but can be difficult to create manually. The platform validates your SVG file to ensure it displays correctly across all supported mailbox providers.
Real Time Monitoring and Alerts
The platform detects authentication failures and helps you enforce policies to protect your brand from fraud. You get instant alerts if your certificate is close to its end date. It also alerts you if a mailbox provider fails to display your logo. This continuous oversight ensures that your brand visibility remains constant.
Compliance and Reporting
You receive detailed reports on how many users see your verified logo. These insights help you measure the impact of your certificate on email open rates. PowerDMARC also tracks global email sources to ensure that unauthorized senders do not use your domain or brand assets.
Conclusion: Take Control of Your Email Branding
The choice between a VMC and a CMC is a strategic decision for your brand. Both certificates improve your email presence, but they serve different needs. If you have a registered trademark and want the highest level of trust through the Gmail blue checkmark, the VMC is the gold standard. If you want to boost your brand visibility quickly without the legal hurdles of a trademark, the CMC provides the perfect bridge.
Your email is often the first point of contact for your customers. A verified logo makes that contact count. It builds instant trust and separates your messages from the noise of the inbox. To succeed with either certificate, you need a solid foundation of email authentication.
Do not let technical hurdles stop your brand from shining. PowerDMARC provides the tools and expertise you need to reach DMARC enforcement and secure your BIMI certificate. Whether you choose a VMC or a CMC, our platform ensures a smooth path to a verified inbox.
Ready to boost your brand visibility and trust? Contact PowerDMARC today to find the perfect certificate for your needs and start your journey toward a verified email presence.
Frequently Asked Questions
Does a CMC show a logo in Gmail?
Yes, it does! Gmail updated its requirements to allow logos from brands using a Common Mark Certificate. Your logo will appear in both the web version and the mobile app. However, keep in mind that the blue verified checkmark is exclusive to VMC holders. If you use a CMC, you get the branding, but not the “verified” badge.
Can I upgrade from a CMC to a VMC later?
Absolutely. Many brands start with a CMC because they are still waiting for their trademark to be approved. Once you have your official registration number from a recognized trademark office, you can apply for a VMC. You will need to go through a new verification process, but your DMARC and logo setup will already be ready to go.
What happens if a DMARC policy is set to ‘none’?
If your policy is p=none, your logo will not show up. Mailbox providers see “none” as a monitoring mode, not a security enforcement. BIMI requires a policy of p=quarantine (at 100% pct) or p=reject. This proves to the providers that you are actively blocking spoofed emails.
Do all email apps support these certificates?
Not all of them. Gmail and Apple Mail are the big players that support VMC. Gmail also supports CMC, but Apple Mail generally requires a VMC for the full BIMI experience. Some providers, like Yahoo and Fastmail, are more flexible and may show your logo even with a self-asserted record, but having a VMC or CMC certificate ensures the widest possible coverage.
Can I have a VMC and a CMC at the same time?
You can own both, but your DNS record can only point to one “Authority Evidence” file at a time per domain. Most companies pick the one that gives them the most benefits. If you have a VMC, there is usually no reason to use a CMC since the VMC covers everything the CMC does and more.
Does a VMC or CMC help my emails stay out of the spam folder?
Not directly. The logo itself isn’t a “get out of spam free” card. However, the DMARC enforcement required to get these certificates is a massive boost to your sender reputation. When you prove you are a verified sender, mailbox providers are much more likely to trust your mail and deliver it to the primary inbox.
Domain & Email Security Expert at PowerDMARC
Yunes is an Operations Team Lead at PowerDMARC with expert knowledge in email authentication and security. Yunes is a Microsoft-certified Azure Administrator Associate with certifications in CompTIA A+ and many more.
Latest posts by Yunes Tarada (see all)
