How can I check if a domain uses Entrust or Digicert for BIMI, and should I avoid Entrust?

To determine if a domain uses Entrust or DigiCert for BIMI, you can manually inspect the certificate details from the BIMI record using tools like OpenSSL or utilize online BIMI checkers such as aboutmy.email. It's important to verify the issuer against approved VMC issuer lists and to monitor news regarding the trustworthiness and compliance of these CAs, especially Entrust, as major email providers' decisions can impact certificate validity. Google's Chrome team views Entrust as violating CA requirements, although there are no root issues directly affecting BIMI. For those prioritizing security, avoiding Entrust in the near future might be prudent. Implementing BIMI with VMCs from trusted CAs enhances email security and brand visibility, provided that correct DNS records are set up. DigiCert is considered a safe choice, and understanding vendor switching costs is advisable.

To check if a domain uses Entrust or Digicert for BIMI, you can manually inspect the certificate by fetching it from the BIMI record using tools like OpenSSL or online BIMI checkers. Verify the issuer details against a list of approved VMC issuers, such as those provided by the BIMI Group. It's important to monitor news regarding the trustworthiness and compliance of VMC issuers like Entrust, as decisions by email providers can impact certificate validity. Implementing BIMI with VMCs from trusted CAs enhances email security and brand visibility.

To check if a domain uses Entrust or Digicert for BIMI, tools like aboutmy.email can pull the BIMI data, including the certificate issuer. Alternatively, dig and curl commands can be used to manually extract the issuer information. While there may be other reasons to distrust Entrust, no root issues directly affect BIMI, but Google's Chrome team views Entrust as violating CA requirements. As such, it is suggested that anyone concerned about security should avoid them in the near future. Understanding the costs and processes involved in switching vendors is important, and choosing DigiCert is unlikely to face criticism.

DigiCert, Entrust, and Sectigo all provide Verified Mark Certificates (VMCs) that are essential for BIMI implementation. These certificates, issued by recognized Certificate Authorities, enable organizations to display their logos in email inboxes. Each provider adheres to BIMI standards, with each documentation explaining the process of acquiring and implementing a VMC.