Is Serasa Experian - Certificado Digital safe?

Low risk

The extension bridges Serasa Experian web pages to a local native host (br.experian.com.serasa) for PKI operations including certificate signing and management.

Content scripts inject on Serasa Experian's digital certificate domains and listen for CustomEvents from page JavaScript. When triggered, they relay certificate operations — signing, listing, installing, and verifying certificates — through to a native messaging host installed on the user's machine. The extension also exposes its runtime ID as a DOM element on matched pages, allowing those pages to detect the extension's presence.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Serasa Experian - Certificado Digitalv1.0.14Chrome Web Store
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.14. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 21 September 2026geenaogahfiljnpdafiobohipggenddh