Enables users to seamlessly import digital certificates issued by the Gléas private certificate authority into their device/browser by acting as a communication bridge between the Gléas web UI and a local native certificate import application

1. User navigates to a Gléas private CA web page (certificate import, token import, or login pages). 2. The web page's page_script sends a message via window.postMessage. 3. The content script receives the message and forwards it to the background service worker. 4. The background script connects to the native CertImporter host app (com.jcch_sss.certimporter) and forwards the message. 5. The native app processes the certificate and stores it on the device. 6. The response flows back through the same chain to the web page.

Target users: Organizations using Gléas private CA for certificate management / Users who need to import digital certificates from Gléas to their devices

The extension is minimal — a messaging bridge with no complex logic, so analysis is straightforward
Cannot inspect the native host application (com.jcch_sss.certimporter) which handles the actual certificate import
Cannot verify whether the Gléas service has paid tiers from the extension code alone

Monetization

No paid features detected

No payment-related code found in the extension. No keywords for premium, subscription, billing, license, payment, price, or upgrade. The extension is a simple bridge between the Gléas web application and a native CertImporter host app (com.jcch_sss.certimporter) with no feature gating or payment UI.

Confidence: 90
Payment platform: --
Source: AI / High
Login required: Yes
Reason: The extension's content scripts match Gléas service authentication endpoints (/ua/*/login/info, /ua/login/info, /ua/*/login/check/*, /ua/login/check/*) and certificate/token import paths. The extension acts as a bridge between the Gléas web app and a native CertImporter host application. The user must be authenticated on the Gléas web platform to access the certificate import pages that trigger the extension's functionality. The extension itself does not implement its own login UI — it operates in the context of the Gléas destination service.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging

Publisher

JCCH Security Solution Systems

JCCH-SSS

Email: [email protected]
Phone: +819049682334
Address: 東日暮里５丁目５２−２神谷ビル 7F 荒川区, 東京都 116-0014 JP

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access