Chrome Web Store
7Versions
1Code reviewed

No malware found

In code review (v1.5.9)

Our reviewer read version 1.5.9 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Certificate Enrollment for ChromeOS, used by 300,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in May 2025.

The extension's permissions and network behavior are fully consistent with its stated purpose as an enterprise certificate enrollment tool for ChromeOS. It communicates only with enterprise-configured HTTPS endpoints via SOAP and REST, uses platform keys for cryptographic operations, and does not exfiltrate data to third parties. The ML model's risk score is low (0.00), and the permhash cluster contains no malicious peers. The code is minified but not obfuscated, and all patterns (XMLHttpRequest, innerHTML, eval) are standard for its tool and AngularJS framework.

Certificate Enrollment for ChromeOS

Certificate Enrollment for ChromeOS Chrome extension security report

ID: fhndealchbngfhdoncgcokameljahhog

Supported Languages

🇸🇦Arabic
🇧🇷Brazilian Portuguese
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇮🇱Hebrew
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇲🇽Latin American Spanish
🇳🇴Norwegian
🇵🇱Polish
🇷🇺Russian
🇪🇸Spanish
🇸🇪Swedish
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
1.6.7
Size
0.48 MB
Rating
4.4/5
Reviews
394
Users
300,000
Type
Extension
Updated
May 6, 2025
Category
Education
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
27extensions
11 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
google.com
Country
IE
Address
Gordon House Barrow Street Dublin 4 D04 E5W5 IE
Website
Visit
Extensions
27
Active
14
Obsolete
11
Listed
22
Unlisted
5
Users
22,295,571

Email Change History

2 changes
Jul 12, 2024
Aug 8, 2024

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
enterprise.deviceAttributes
Permission
High
This permission accesses device hardware information. Rated High because it can fingerprint devices, gather system information, and potentially identify enterprise assets.
enterprise.platformKeys
Permission
High
This permission accesses enterprise platform cryptographic keys. Rated High because it can access enterprise authentication mechanisms and potentially compromise enterprise security.
clipboardWrite
Permission
High
This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
platformKeys
Permission
High
This permission accesses platform cryptographic keys. Rated High because it can interact with system certificates, potentially compromising secure communications.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Request a certificate for your device.

Read the publisher’s full description

Easily request a certificate for your managed Chromebook to access resources in a PKI environment. This extension provides an out-of-the-box certificate enrollment experience for Chromebooks in enterprises with a deployment of Microsoft Public Key Infrastructure based off of Active Directory Certificate Services (ADCS). Once installed on managed devices, this extension will allow users to generate hardware-backed keys and use them to request certificates from ADCS. You can find the deployment and usage manuals under our support pages. By installing this item, you agree to the Google Terms of Service and Privacy Policy at https://www.google.com/intl/en/policies/. Additionally, this extension utilizes open source libraries from third parties that come with their own licenses. Please see below for each library and associated license: PKI.js Copyright (c) 2014, GlobalSign Copyright (c) 2015-2019, Peculiar Ventures All rights reserved. Author 2014-2019, Yury Strozhevsky Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of the {organization} nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ASN1.js Copyright (c) 2014, GMO GlobalSign Copyright (c) 2015-2022, Peculiar Ventures All rights reserved. Author 2014-2019, Yury Strozhevsky Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
35
IPv4
41

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
1.6.3
Latest
0.62 MBNot scanned—
c22c3ba9f6340303c24143dfaf2da1c298a3a443b28a6a0a0c7bdf016c3c2ae9
1.5.10
0.50 MBNot scanned—
e2e905332166239688dcd0b70ad619ab66362fb56911961202c9345d49ad0a8b
1.5.9
0.50 MBNo malware found0
e2e905332166239688dcd0b70ad619ab66362fb56911961202c9345d49ad0a8b
1.5.6
0.50 MBNot scanned—
e2e905332166239688dcd0b70ad619ab66362fb56911961202c9345d49ad0a8b
1.5.3
0.50 MBNot scanned—
e2e905332166239688dcd0b70ad619ab66362fb56911961202c9345d49ad0a8b
1.6.7
0.48 MBNot scanned—
c22c3ba9f6340303c24143dfaf2da1c298a3a443b28a6a0a0c7bdf016c3c2ae9
1.6.5
0.62 MBNot scanned—
c22c3ba9f6340303c24143dfaf2da1c298a3a443b28a6a0a0c7bdf016c3c2ae9
Showing 1 to 7 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from google.com

Popular in Education