Botdoc Secure MFP Root Certificate & SMTP Server

Overview

To send scans securely through Botdoc Secure MFP, your device connects to apimfp.botdoc.io and must trust the Botdoc Root Certificate. Install the certificate once on the MFP, then follow your device's setup guide for the SMTP settings.

The certificate lets the MFP confirm it is talking to Botdoc before it sends any document. Without it, devices that verify certificates will refuse the connection.

Download the certificate

Both files contain the same certificate. Download the format your device asks for.

Format	File	Download link
DER (binary)	botdoc-apimfp.cer	https://support.botdoc.io/hubfs/MFP_Certificates/botdoc-apimfp.cer
PEM (text)	botdoc-apimfp.pem	https://support.botdoc.io/hubfs/MFP_Certificates/botdoc-apimfp.pem

Not sure which to use? Try DER first. If the device rejects the file, use PEM. A PEM file opened in a text editor starts with -----BEGIN CERTIFICATE-----.

Botdoc SMTP server settings

Every device uses the same server. Menu names vary by brand; your device guide shows where each setting lives.

Setting	Value
SMTP server (host)	apimfp.botdoc.io
Port	587
Encryption	TLS / STARTTLS
Authentication	On (Login / Plain or SMTP-AUTH)
Username and password	Your Botdoc SMTP credentials, provided by Botdoc
Sender / reply address	Your Botdoc email address
Verify server certificate	On, after installing the Botdoc Root Certificate

Confirm you have the right certificate

After installing, open the certificate on your device and check it matches these details.

Field	Value
Issued to (Common Name)	*.botdoc.io
Issued by	*.botdoc.io (Botdoc, Secure MFP)
Organization	Botdoc, Monument, Colorado, US
Valid from	October 28, 2026
Valid until	October 20, 2056
SHA-256 fingerprint	A4:45:BD:42:E7:1E:A9:B8:59:81:15:56:6A:75:04:EA:F2:65:2D:84:EA:69:4F:A7:9D:4D:13:CB:61:4B:01:52
SHA-1 fingerprint	32:D2:24:FC:AA:84:92:B7:8F:AB:D4:9A:3B:26:89:30:F7:BF:17:0F

Some devices list the certificate only by its expiry date. Look for the 2056 date.

Which format your device uses

Device	Certificate	Where to install it
Brother MFC-L8900CDW	PEM	Network → Security → CA Certificate (max 2 CA certificates)
Canon imageRUNNER	DER or PEM	Device Management → CA Certificate Settings
HP Color LaserJet Flow M57	DER	Security → Certificate Management → CA Certificates
Konica Minolta Bizhub C458	Optional	Certificate verification is turned off in this setup
Kyocera TASKalfa	DER	Security Settings → Certificates → Root Certificate 1
Lexmark MX622adhe	DER or PEM	Security → Certificate Management → Manage CA Certificates
Ricoh MP Series	Not required	Site Certificate Check stays Inactive
Sharp BP-50C26	DER or PEM	System Settings → Security Settings → CA Certificate Management
Toshiba e-STUDIO	PEM	Administration → Security → Certificate Management → CA Certificate (PEM)
Xerox B225	DER or PEM	Security → Certificate Management → Manage CA Certificates

Device not listed? Look for a section named CA Certificates, Root Certificates or Trusted Certificates in the device's web interface.

Troubleshooting

Problem	What to do
Device rejects the file	Try the other format (DER or PEM).
"Certificate list is full"	Delete an unused CA certificate, then upload again. Brother allows only 2.
"Certificate not yet valid" or a date error	Check the device's date and time. The certificate is valid from October 28, 2026.
Connection fails with certificate verification on	Confirm the server is apimfp.botdoc.io, the port is 587, and the installed certificate shows a 2056 expiry.
An older Botdoc certificate is installed	Install the current certificate. You can delete the old one once a test scan succeeds.
Still failing	Contact Botdoc Support with your device model and any error message.