Enables web applications on Certisign domains to interact with locally installed digital certificates and the CertisignerHost.exe native application, bridging the gap between web-based certificate workflows and local certificate storage/signing capabilities

Content scripts injected into Certisign web pages listen for custom DOM events (e.g., certisigner-sign, certisigner-list-certificates). These events carry certificate operation parameters. The content scripts forward requests via chrome.runtime.sendMessage to the service worker, which communicates with the native CertisignerHost.exe application through Chrome's native messaging API. Results are returned back through the same chain as custom DOM events.

Target users: Brazilian users who need digital certificates for legal/electronic document signing / Certisign customers managing ICP-Brasil digital certificates / Users of Certisign web applications requiring local certificate access

No UI code present - extension is purely a message-passing bridge, so user-facing behavior depends entirely on the Certisign web applications
Cannot verify whether Certisign web apps require authentication without testing the live service
Cannot verify whether the native CertisignerHost.exe has its own licensing/payment requirements

Monetization

No paid features detected

No evidence of paid features, subscriptions, billing APIs, or upgrade prompts within the extension code. The 'pro' keyword matches are all false positives matching 'provider' in cryptographic contexts (CSP providers, PKCS11 providers). The extension is a free utility bridge between Certisign web apps and a native certificate management host. While Certisign sells digital certificates as a business, the extension itself does not gate any functionality behind payment.

Confidence: 85
Payment platform: --
Source: AI / Medium
Login required: Yes
Reason: The extension is a bridge/proxy that operates exclusively within Certisign web applications (*.certisign.com.br, *.certintra.com.br). It forwards certificate operations to a native desktop app via native messaging. The extension itself has no login UI, but the Certisign web applications it works within require authentication to access digital certificate management features. The extension cannot function outside these authenticated web contexts.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging
扩展能力较强：storage

Publisher

solucoescertisign

Marcos Vinicius Milanello

Email: [email protected]
Phone: --
Address: CEMG - Centro Empresarial Mario Garnero Torre Norte - Av. Brig. Faria Lima, 1485 - 6 andar São Paulo, SP 01452-002 BR

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access