Is CFCA CertEnrollment SMB Extension safe?

Clean risk

CFCA CertEnrollment SMB Extension lets approved Suning Bank pages relay requests to a local native messaging host.

The extension accepts external messages only from 10.11.61.3 and Suning Bank domains listed in its manifest. Those pages can open a Chrome native messaging connection using a host name they provide, send funcInfo payloads to the local native app, and receive the app's response through the extension.

smbv3.2.0.1Chrome Web Store
1Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.2.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on 10.11.61.3

    http://10.11.61.3/* and 1 more

  • Read and change your data on suningbank.com

    http://*.suningbank.com/* and 1 more

  • Read and change your data on smb956101.com

    http://*.smb956101.com/* and 1 more

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026fgckodopphhlaflphfigfcoigkookblf