GlobalSign BIMI Certificatesfrom $649/year

SimpleDMARC supplies GlobalSign Verified Mark Certificates (VMC) from $749 a year and Common Mark Certificates (CMC) from $649 a year. We order the certificate, handle validation with GlobalSign, and get your DMARC ready, so the logo appears in the inbox once the certificate is issued.

This page covers what a GlobalSign BIMI certificate costs, what you need to have ready, how we order it, and the questions people ask most, including how to handle more than one domain.

GlobalSign VMC and CMC at a Glance

	Verified Mark Certificate (VMC)	Common Mark Certificate (CMC)
Price through SimpleDMARC	From $749 / year	From $649 / year
Registered trademark needed	Yes	No
Logo in use for 12+ months	Not separately required	Required
Gmail blue checkmark	Yes	No
Logo shown in the inbox	Yes	Yes
Terms	1, 2 or 3 years	1, 2 or 3 years
Typical turnaround	Typically 1–3 business days	Typically 1–2 business days

Final price depends on the term, and multi-year terms lock in your price. Turnaround starts once your documents are complete.

VMC or CMC: Which One Should You Order?

The deciding factor is your trademark.

A VMC requires a registered trademark covering your logo, from a recognized trademark office. In return it gives you the blue checkmark Gmail shows beside verified senders, and the logo in the inbox.

A CMC does not require a trademark. It requires evidence that your logo has been in public use for at least 12 months. It shows your logo but not the Gmail checkmark.

Many organizations start with a CMC because it is quicker to qualify for, then move to a VMC after registering a trademark. The BIMI record and DMARC setup do not change when you upgrade. If trademark is your question, read BIMI without a trademark.

Why Choose GlobalSign

• Rigorous, upfront enterprise vetting: GlobalSign takes compliance seriously. While their initial organization validation is meticulous, once your corporate identity and domain profiles are verified, renewals and additional certificates issue rapidly without repeated friction.
• Knowledgeable vetting desk: When edge cases crop up—like subsidiary legal filings, government registrations, or cross-border entity structures—their validation support provides direct answers rather than automated, unhelpful ticket deflections.
• Who picks it: Banks, government vendors, and enterprise IT departments that already trust GlobalSign’s broader PKI ecosystem and value institutional audit pedigree over bargain-basement pricing.

GlobalSign is one of three authorities we resell. For a side-by-side view, see the full comparison.

More Than One Domain?

This is the question that trips people up, so it gets its own section.

BIMI is published per sending domain, in a DNS record at default._bimi.. If you send mail from several domains, each one needs its own enforced DMARC policy and its own BIMI record.

What is less clear is how many domains one certificate can cover.

• Standard Base Certificate Covers One Domain: A base GlobalSign VMC or CMC is licensed and issued for a single primary domain (FQDN).
• Multiple Domains via SANs (Subject Alternative Names): You do not need to buy entirely separate certificates if you send from multiple domains or subdomains, provided they all share the exact same verified logo and owning legal entity. You can secure additional domains by adding SANs to the primary certificate.
• Extra Domains Incur Additional Costs: Standard base licenses include only one domain. Each additional domain or subdomain added as a SAN incurs an extra per-domain fee (typically a fraction of the base certificate price).
• One Certificate, Multiple Subdomains: Wildcard coverage (*.example.com) is not permitted under BIMI standards. Each sending subdomain (e.g., news.example.com, mail.example.com) must be explicitly listed as a distinct SAN entry on the certificate.
• Reuse Constraint: A single certificate cannot be split or shared across different organizations or distinct logos. If different sending domains require different logos, each unique logo mandates a separate certificate order.

Our advice for multi-domain senders:

1. List every domain that sends customer-facing mail.
2. Decide which ones carry the brand customers see. Start there.
3. Get DMARC to enforcement on those domains first.
4. Order certificates once the domains are ready, so none sit unused.

Our DMARC plans monitor several domains together, which makes step 3 easier. The free Growth plan included with your certificate covers up to 10.

What You Need Before You Order

• Enforced DMARC: p=quarantine or p=reject, with pct=100. A policy of p=none will not work. Test with the DMARC Checker.
• Aligned SPF and DKIM for every legitimate sending service.
• Logo in SVG Tiny P/S, served over HTTPS. Convert free with the BIMI SVG Converter.
• Proof for validation: trademark registration details for a VMC, or evidence of 12 months' use for a CMC.
• Organization details: legal name, country, business contact.

How Ordering Works

1. You request. One form with domain, company, logo, and trademark details if needed.
2. We check. We test your DMARC and logo and tell you what to fix.
3. We order. We place the GlobalSign order, so you do not need to use their
4. GlobalSign validates. We pass on questions and keep you updated.
5. We deliver. Typically 1–5 business days for a VMC and 1–4 for a CMC once your documents are complete.
6. You publish, or we host it with Hosted BIMI. portal.

Publishing Your BIMI Record

``default._bimi.yourdomain.com. IN TXT "v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/certificate.pem"``

v=BIMI1 is the version, l= is your SVG logo address, and a= is your certificate file address. The BIMI Generator builds the record for you. Mailbox providers can take up to 48 hours to start showing the logo after you publish.

Common Mistakes Before You Publish

The certificate arrives, you publish the record, and the logo still does not show. These are the usual causes:

• The record is at the wrong name. It must be a TXT record at default._bimi.yourdomain.com, not at the root of the domain. Many DNS panels add the domain automatically, so enter only default._bimi in the name field.
• The logo or certificate address is not HTTPS, or is not publicly reachable. Mailbox providers fetch both files, so a login page or a blocked address will make the record fail.
• DMARC slipped back. If a change moved your policy to p=none or lowered pct, BIMI stops working. Keep monitoring after you go live.
• You tested too soon. Allow up to 48 hours before assuming something is wrong, and use the BIMI Checker to see what is actually published.

Price and Terms

GlobalSign VMCs through SimpleDMARC start at $749 a year and CMCs at $649 a year, on 1, 2 or 3 year terms. We confirm the exact price in writing before you pay.

Free DMARC Growth With Your Certificate

Order before 31 Dec 2026 and the DMARC Growth plan is free for 12 months (normally $182 a year): up to 10 domains, unlimited DMARC reports, hosted SPF and MTA-STS, and a year of history. It is the tool that takes you to enforcement, which BIMI needs.