Is I.CA PKI Service Component safe?

Low risk

I.CA PKI Service Component forwards requested cookie values from matched websites to its native PKI host.

On the websites listed in its manifest, page scripts can ask the extension to look up browser cookies by URL and name. The background script reads those cookies, formats them as name=value strings, and sends them to the native PKI service host.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ICAv2.2.1.0Firefox Add-ons
19Risk
Who publishes it

ICA - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
ICA
Website

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.2.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on ica.cz

    *://*.ica.cz/*

  • Read and change your data on csob.cz

    *://*.csob.cz/*

  • Read and change your data on csob.sk

    *://*.csob.sk/*

  • Read and change your data on proebiz.com

    *://*.proebiz.com/*

  • Read and change your data on localhost

    *://localhost/*

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Read and change cookies, including the ones that keep you signed in

    cookies

Where it sends data

Destinations our analysis observed I.CA PKI Service Component contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • cz.ica.icapkiservice.host

    I.CA PKI Service Component sends data to cz.ica.icapkiservice.host. 4 other extensions we have analysed send data here.

Updated 30 September 2026amo-766290