← All installation guides Hosting control panels

Install a VerifySeal seal on Plain HTML or PHP website

Install directly in an HTML, PHP or server-rendered website without a CMS.

HTML
Recommended methodJavaScript embed recommended
Website installation

Step-by-step instructions

  1. 1

    Locate the shared layout

    Find the page, footer include or layout template used by the public website. Use a shared footer if the seal should appear on every page.

  2. 2

    Paste the script

    Insert the Recommended JavaScript embed at the exact point where the 300 by 106 pixel seal should render.

  3. 3

    Keep the code unchanged

    Do not copy the generated SVG file or remove the token. The remote image and certificate link provide the live status.

  4. 4

    Deploy and test

    Upload or deploy the changed file, load the HTTPS website and confirm the seal opens the correct live certificate.

Domain ownership callback

Complete domain validation on Plain HTML or PHP website

Use the unique callback code displayed on the customer order. Never reuse a code from another domain or application.

  1. 1

    Create /.well-known/verifyseal.txt beneath the website document root.

  2. 2

    Put the callback code on its own line and make sure the web server serves the file as public text over HTTPS. Additional VerifySeal codes can use separate lines.

  3. 3

    If files cannot be created, use the supplied verification meta tag inside the homepage head element.

Testing checklist

Confirm the installation is working

01

Visible

The complete 300 × 106 seal is visible and not cropped on desktop or mobile.

02

Clickable

The seal opens the VerifySeal public certificate rather than a copied local image.

03

Current

The certificate status is verified, the expiry is current and the details match.

04

Correct domain

The registered production hostname matches the website displaying the seal.

Platform notes
  • The JavaScript embed automatically sends the displaying hostname to VerifySeal so a copied seal can show a wrong-website warning.