bonus.bimi.vmc_present
BIMI Evidence Certificate Present
What we check
When the BIMI record carries an a= tag, we fetch the referenced evidence document (Verified Mark Certificate) and validate it structurally: the document is a parseable PEM certificate chain, the leaf certificate is inside its validity window, and it carries the BIMI logotype extension (OID 1.3.6.1.5.5.7.1.12, RFC 9399).
This is deliberately not a trust verdict: the BIMI VMC issuer ecosystem is not standardized the way the web PKI is, so Kuveris validates the certificate's structure and says so — it does not claim to have verified the issuer chain.
What this finding means
The a= evidence certificate passed every structural check. Mail providers that require a VMC (notably Gmail and Apple Mail) have a well-formed document to evaluate; whether they accept it depends on their trust in the issuing mark-verifying authority.
How it's graded
Informational — the VMC checks carry no score weight. See Grading Methodology for the full scoring model.
Evidence example
default._bimi.example.com. TXT "v=BIMI1; l=https://example.com/logo.svg;
a=https://example.com/vmc.pem"
→ fetched vmc.pem: PEM chain, leaf valid 2026-01-15 – 2027-01-15,
logotype extension present