Email Authentication Glossary
Certificate & VMC
BIMIhigh

Authority URL Scheme is Not HTTPS

“Authority URL scheme is not HTTPS” means the BIMI record's non-empty a= authority URI does not use HTTPS. The BIMI draft requires a non-empty a= URI to specify HTTPS. Brand Indicators for Message Ide

The exact error

Authority URL scheme is not HTTPS
cert-not-https

What Does “Authority URL Scheme is Not HTTPS” Mean?

“Authority URL scheme is not HTTPS” means the BIMI record's non-empty a= authority URI does not use HTTPS. The BIMI draft requires a non-empty a= URI to specify HTTPS. Brand Indicators for Message Identification draft 14 documents the controlling requirement or boundary.

The record fails authority-location validation before evidence can be accepted. The scheme check is deterministic; certificate acceptance remains receiver policy.

Why Does Authority URL Scheme is Not HTTPS Appear?

Authority URL scheme is not HTTPS appears when the authority location uses HTTP or another unsupported scheme. The exact diagnostic should be read at the scope of BIMI authority-evidence URI rather than as proof that every BIMI layer failed.

How Do You Fix Authority URL Scheme is Not HTTPS?

To fix Authority URL scheme is not HTTPS, replace the a= value with the certificate's public HTTPS URL.

An HTTPS scheme does not prove successful retrieval or certificate validity.

What Should You Verify After Fixing Authority URL Scheme is Not HTTPS?

After fixing Authority URL scheme is not HTTPS, reparse the record and fetch the exact HTTPS destination without a downgrade. Verification should use the exact public selector, URL, record, or file evaluated by the receiver.

The correction clears only this condition; it does not guarantee that a receiver will display an indicator.

Key Takeaways

  • The affected object is BIMI authority-evidence URI.
  • The direct correction is to replace the a= value with the certificate's public HTTPS URL.
  • An HTTPS scheme does not prove successful retrieval or certificate validity.
Check your BIMI record

See exactly which checks your domain passes and fails.

Email Authentication Glossary