api.ranker.com

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 01:c3:64 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=api.ranker.com,OU=GT23428363+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c3:64
Serial Number (int): 115556
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): 33:7a:f8:37:c0:b5:11:a2:e6:56:69:00:75:a7:a0:6c:d5:bf:69:a1
Fingerprint (sha256): 10:e5:19:c0:e5:a8:bb:04:c5:28:56:03:c8:d9:bf:f6:81:fa:7f:06:cb:c0:6a:57:26:d3:11:34:be:01:51:e7

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate api.ranker.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ranker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ranker.com

Other certificates including the domain name ranker.com

(limited to 100 certificates)
stacksocial.com
sni60165.cloudflaressl.com
ssl004.insnw.net
sni60165.cloudflaressl.com
sni60165.cloudflaressl.com
ssl004.insnw.net
carsgenius.com
ssl004.insnw.net
ssl001.insnw.net
sni60165.cloudflaressl.com
sni60165.cloudflaressl.com
ranker.com
sni60165.cloudflaressl.com
uc12.janrainengage.com
stacksocial.com
stacksocial.com
sni60165.cloudflaressl.com
ssl004.insnw.net
sni60165.cloudflaressl.com
ssl004.insnw.net
ssl004.insnw.net
sni60165.cloudflaressl.com
sni60165.cloudflaressl.com
stacksocial.com
sni60165.cloudflaressl.com
content.ranker.com
ssl004.insnw.net
sni60165.cloudflaressl.com
sni60165.cloudflaressl.com
ssl001.insnw.net
g01.ranker.com
ssl001.insnw.net
stacksocial.com
sni60165.cloudflaressl.com
ssl004.insnw.net
ssl001.insnw.net
ssl001.insnw.net
sni60165.cloudflaressl.com
ssl001.insnw.net
ssl004.insnw.net
stacksocial.com
ssl004.insnw.net
stacksocial.com
stacksocial.com
stacksocial.com
sni60165.cloudflaressl.com
ssl004.insnw.net
sni60165.cloudflaressl.com
ssl004.insnw.net
sni60165.cloudflaressl.com
api.ranker.com
stacksocial.com
sni60165.cloudflaressl.com
sni60165.cloudflaressl.com
ssl001.insnw.net
sni.cloudflaressl.com
sni60165.cloudflaressl.com
stacksocial.com
ssl001.insnw.net
sni60165.cloudflaressl.com
ssl004.insnw.net
stacksocial.com
sni60165.cloudflaressl.com
sni60165.cloudflaressl.com
ranker.com
carsgenius.com
sni60165.cloudflaressl.com
hefa.lt
ssl004.insnw.net
votations.24heures.ch
blog.ranker.com
ranker-ads.ranker.com
sni60165.cloudflaressl.com
sni60165.cloudflaressl.com
sni60165.cloudflaressl.com
applink-alpha.sportshi.io
carsgenius.com
blender.getxmlfeeds.com
ssl001.insnw.net
stacksocial.com
sni60165.cloudflaressl.com
sni60165.cloudflaressl.com
ssl004.insnw.net
sni60165.cloudflaressl.com
*.ranker.com
sni60165.cloudflaressl.com
api.ranker.com
sni60165.cloudflaressl.com
stacksocial.com
sni60165.cloudflaressl.com
ssl004.insnw.net
stacksocial.com
sni60165.cloudflaressl.com
carsgenius.com
cdn.roiq.ranker.com
stacksocial.com
carsgenius.com
stacksocial.com
sni60165.cloudflaressl.com
carsgenius.com

Certificate

The complete raw certificate details for api.ranker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkV6rcwlRXPQr9UrHRSk
D+PfSQO1FBcuH70YCVkDxCCUMj30x1jDAZE+AwrrI7xZVE9dfOUbreggPI1+Qu9h
X3kI4JJQ4QNvGicNm3vJOHRAJR1uOTDPNccpywkrGm4oFYHAVnL1W0DSF3siMKYS
63xhIh/Jx/L2Sa/YbkaipOJHn4kbr/88NJCsDlKE1Yd1Fl12dqG9Bo+6bbARcTsH
UplwWsdN6ovK7vf/5bz8q0wUlBykrnOGBl5jzSGBKHNHJOi+cIsZZOPRLtR9jKGo
oh00D+pV9Y4nn1Hz76FrwbSUByX/3BBjYF1qMZsBLpa5J9leYN6l7aJbd7hUTueC
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-19 14:10:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-22 18:19:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT23428363'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ranker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24019539421133535666689630251431602857313410888376904743133349303685881236054101095650642175764797076351903516014969067139249879209410292615154290851633963244859769057789359236459557370686040764455417418082163488388483388117939844297706209582566307044330804707242856445721298501030270769509755655776243804840316770826494201421993822361360096599089193882128838761262476065804191669553452689550159404969244007825223233481918066210319253540373253508700180270592594927455738475186619400952431379227448702237539485394115720178904910230170270176032945933099064818457427756128936023321134846869238625355815113403773953213021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ranker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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