FAQs

Valimail Essentials covers up to 5 domains per account. For 6 or more domains, Valimail sells Enforce directly, priced by quote.

Copy Link

Valimail works by hosting your SPF and DMARC records, so you point those records to Valimail in your DNS. It reads aggregate DMARC reports, which list sending IP addresses and pass or fail counts, not the content of your emails. Valimail lists SOC 2 Type 2 certification on every plan, and a FedRAMP deployment option on Enforce Enterprise.

Copy Link

DigiCert. It announced the acquisition on September 16, 2025. DigiCert also issues the VMC and CMC that SSL Dragon sells, so your DMARC service and your BIMI certificate come from the same company.

Copy Link

Valimail is an email authentication company, launched in 2015 and now part of DigiCert. It hosts your SPF and DMARC records, manages DKIM, and reads DMARC reports to show who sends email as your domain. Then it moves your domain to DMARC enforcement, so receivers reject spoofed mail.

Copy Link

If an automatic renewal fails with AutoInstall SSL®, the agent spots it during its daily check and emails you, so you can fix the issue before the certificate expires. ACME clients vary, so add expiry monitoring if yours doesn’t send alerts. Let’s Encrypt, for example, stopped sending expiry emails in June 2025. Our ACME troubleshooting guide covers the most common errors.

Copy Link

Yes, wildcard certificates can be automated. Choose RapidSSL Wildcard + Automate, GeoTrust QuickSSL Premium Wildcard + Automate, or add wildcard domains to Sectigo ACME CaaS. Automated wildcard certificates need DNS validation. For AutoInstall SSL®, that means a supported DNS provider with API access. For ACME, you need a client with a DNS plugin for your provider.

Copy Link

No. With a RapidSSL or GeoTrust automation plan you pay for the subscription once a year, and every reissue during that year is free and unlimited, however often your certificate’s lifetime requires one. Your automation handles those reissues in the background.

Copy Link

To automate SSL certificate renewal:

1. Buy any certificate listed on this page.
2. Install the AutoInstall SSL® agent, or connect your ACME client using the EAB credentials from your account.
3. Confirm the first certificate installs correctly, then run a test renewal if your client offers one (for example, certbot renew --dry-run).

Our ACME client guides walk you through popular setups step by step.

Copy Link

Yes. SSL certificate auto-renewal works when three things are in place:

• a certificate plan that allows automation, such as any certificate on this page
• an automation method, either the AutoInstall SSL® agent or an ACME client
• access to your server, or a platform that supports ACME

With those in place, DV renewals need no action from you while your subscription is active. OV and EV certificates also need the company’s details re-checked once a year.

Copy Link

Not in their encryption, which is the same as any other certificate’s. The risk is the shared private key: every server that uses the certificate holds it, so a leak on one server affects every subdomain it covers. Install it on as few servers as you need and protect each copy.

Copy Link