Certificate Provider

certificateProvider

High RiskCategory: CommunicationView Official Docs↗

Technical Context

Allows the extension to provide custom client certificates for TLS authentication. This enables integration with hardware security modules or custom certificate stores.

What This Means For You

The extension can provide digital certificates for secure website authentication. This is used for smart card login or enterprise security.

Related APIs

This permission enables access to these Chrome APIs:

chrome.certificateProvider

Common Use Cases

✓Smart card readers
✓Hardware security modules
✓Enterprise auth

How to Declare in manifest.json

Add the "certificateProvider" permission to your extension manifest:

{
  "manifest_version": 3,
  "name": "My Extension",
  "permissions": [
    "certificateProvider"
  ]
}

Related Permissions

Native Messaging

nativeMessaging

The extension can talk to other programs installed on your computer, not just things in the browser. This is used by password managers and system utilities.

high

Web Navigation

webNavigation

The extension can see when you navigate to different pages and how you got there, like clicking a link or using back/forward. It sees URLs as you browse.

high

Web Authentication Proxy

webAuthenticationProxy

The extension can intercept security key authentication requests. This is highly specialized and used for remote access to security keys.

high

Runtime

runtime

This allows different parts of the extension to communicate with each other. It also enables the extension to respond when Chrome starts or when you click its icon.

low

Identity

identity

The extension can sign into services on your behalf using Google login or other authentication providers. By itself, it cannot see your email address.

low