Certificates and renewals

Your logo is backed by a mark certificate (VMC or CMC) issued by an independent certificate issuer, currently DigiCert. We order it, track it and keep it renewed.

Ordering#

We order your certificate automatically as soon as everything is ready:

• payment received,
• business details verified,
• logo approved,
• domain ownership confirmed.

You don't have to press anything. The certificate step shows each prerequisite and whether it's met.

Issuer validation#

The issuer does its own checks of your business, your authority to apply and your logo. They may:

• email the applicant to confirm the request,
• call the phone number you gave, or
• ask for a document.

When they need something from you, the certificate step (and an email from us) tells you exactly what to do. Validation usually takes from a few days to a few weeks. If the issuer rejects the application, you get a full refund.

Statuses#

Renewals#

Mark certificates are valid for about 13 months (at most 398 days). If one expires, your logo stops showing. We prevent that:

• We start the renewal automatically about 45 days before expiry, as long as your plan is active.
• We send reminders 60, 30, 14, 7 and 1 day before anything is due, so nothing surprises you.
• If something needs your attention (for example the issuer re-confirming your details), we tell you early.
• Renewal also renews your plan for another year; the estimated total, including the issuer's fee, is shown before it's charged.

You can also renew early from the certificate step.

Reissue#

A reissue gets you a fresh certificate within the same paid year, for example after you update your logo or your company details change. Start it from the certificate step and we handle the rest.

Revocation#

Revocation cancels a certificate permanently, and your logo stops showing. Only do this if something is wrong (for example the certificate shows an outdated legal name, or you no longer use the domain). Because it can't be undone, it requires an explicit confirmation.

Hosting#

Your certificate file (PEM) and logo are hosted by us. See Hosting.

For developers#

• GET /v1/applications/{id}/certificate — status, issuer_order_id, serial, not_before, not_after, days_remaining, prerequisites, customer_actions, timeline, plus history.
• POST /v1/applications/{id}/certificate/order — normally automatic; idempotent.
• POST /v1/applications/{id}/certificate/renew — early renewal.
• POST /v1/applications/{id}/certificate/reissue — { "reason" }.
• POST /v1/applications/{id}/certificate/revoke — { "reason", "confirm": "REVOKE yourdomain.com" }.
• Mutations need the certificates:write scope and an Idempotency-Key header.
• MCP: get_certificate, order_certificate, renew_certificate, reissue_certificate, revoke_certificate.