Order Common Mark Certificate

Nov 3, 2025

Order Common Mark Certificate

Prerequisites

• DMARC Policy. Ensure it is set to "quarantine" at 100% or "reject" to comply. 
  Please note that you need to apply the DMARC policy 30 days in advance. 

• SPF and DKIM Records. Make sure these are configured correctly for your domain to enhance email authentication.
  To set up DKIM, SPF and DMARC, please refer to this guide.

• BIMI Guidelines Compliance. Format your logo according to the BIMI (Brand Indicators for Message Identification) standards.
  To convert your logo to according to BIMI standards, please refer to this guide.

• Your logo must have been in use for at least 12 months.

Guidelines

1. Log in to your GCC account and go to SSL Certificates. 
   
   

2. Under My Certificates, click Order New Certificates and select CMC - Prior Use Mark. 

   

3. In the same window, select Specific Subject Alternative Names (SANs) as Yes, if you need to add multiple domains to your order. Then, click Continue. Note: If left as No, by default you will be asked to add one domain only that can be your primary domain. 
   
   

4. In Point of Contact #1, enter your contact details to be used for any further communication. Then, click Continue. 
   
   

5. In the Certificate Identity Details, provide your common name/SAN, Organization, Locality, State or Province, and country. Then, click on Continue.
   
   

6. Review all the information you have provided and click Continue.
   
   

7. In the next screen, choose your file and upload your logo. Then, click Continue.
   
   

8. If you selected Yes for the add specific subject alternative name, then you will be asked to enter the extra domain/s that you want to use CMC for. Then, click Continue.
   
   

9. In the Your Secure Server window, you can view the summary of the FQDN requested for your CMC. Once confirmed, click Continue
   
   

10. In the Mark Specific Details Requirements window, there are some important items of information that we require for the creation of your Mark Certificate (see description below).
    
    
    
    The first request is to confirm your Business Category. Please select one option.

    Field

    Value to choose as per your knowledge

    Business Category

    Private Organization: A non-governmental legal entity (whether ownership interests are privately held or publicly traded) whose existence was created by a filing with (or an act of) the Incorporating Agency or equivalent in its Jurisdiction of Incorporation. Business Entity:  Any entity that is not a Private Organization, Government Entity, or Non-Commercial Entity as defined herein. Examples include, but are not limited to, general partnerships, unincorporated associations, sole proprietorships, etc. Non-Commercial Entity: An Applicant qualifies as a Non-Commercial Entity if:  1. The Applicant is an International Organization Entity, created under a charter, treaty, convention or equivalent instrument that was signed by, or on behalf of, more than one country’s government. The CA/Browser Forum may publish a listing of Applicants who qualify as an International Organization for Mark eligibility; 2. The Applicant is not headquartered in  any country where the CA is prohibited from doing business or issuing a certificate by the laws of the CA’s jurisdiction; and 3. The Applicant is not listed on any  government denial list or prohibited list (e.g., trade embargo) under the laws of the CA’s jurisdiction. Government Entity: A government-operated legal entity, agency, department, ministry, branch, or similar element of the government of a country, or political subdivision within such country (such as a state, province, city, county, etc.).

    
    In the same window, you will also have to enter the Incorporation agency registration number / Corporate registration number. 
    Note: If you are not sure which registration to use, then you can also leave this blank, and our vetting team will attempt to locate this for you.
    
    
    
    Fill out the rest of the required fields, then click Continue. 
    
    

11. In the Payment Information window, select your preferred payment method and click Continue.

    IMPORTANT: For credit card payments, you will receive an email with a link to process your payment before your certificate is issued. This payment link is available in the GCC portal. For instructions on how to process payment for your certificate, please ​​​refer to this guide.

12. Review all the information you provided in Confirm Details/Summary window and tick the Subscriber Agreement box. Then, click Complete. 
    
    

13. Once completed, you will receive the Order ID/Number on your registered email ID. In the email and in the screen below, you will also receive the Domain Verification Screen or code. Please click on the code below to start your domain verification process. Note: CMC order numbers include the string "PMC" embedded before a sequence of random digits. This identifier helps distinguish CMC orders from other types.
    
    
    
    Our vetting team will get in touch with you, as and when needed. Once your domains are verified, and your organization and logo details have been verified from our end, we will email with your Mark Certificate PEM file.