jp-api.tradestation.com

- TradeStation Technologies, Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:e8:7f:3e:9d:ac:94:d1:64:77:57:4d:59:f9:a0:a3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TradeStation Technologies, Inc.

Organization: TradeStation Technologies, Inc.
Organization unit: TradeStation Technologies
State / Province: Florida
Locality: Plantation
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:e8:7f:3e:9d:ac:94:d1:64:77:57:4d:59:f9:a0:a3
Serial Number (int): 19816385639132426432778365129325125795
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 67:35:84:27:02:71:fe:bc:a8:5d:19:67:14:6c:16:75:6c:cf:50:1c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 67:b1:ee:c8:e6:7b:08:cc:ca:90:65:fb:58:1d:a3:db:36:6c:ec:ea
Fingerprint (sha256): 22:49:39:27:9b:1d:dd:1c:0b:10:a2:29:4d:34:5b:7d:b4:2d:b8:71:67:5e:d6:1c:8b:1a:92:b2:64:17:15:57

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate jp-api.tradestation.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jp-api.tradestation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jp-api.tradestation.com

Other certificates including the domain name tradestation.com

(limited to 100 certificates)
www.shortlocate.tradestation.com
careers.tradestation.com
oos.tradestation.com
developer.tradestation.com
community.tradestation.com
eng.webtrading.tradestation.com
sim.webtrading.tradestation.com
sim.webtrading2.tradestation.com
sim.api.tradestation.com
webtrading.monex.tradestation.com
clientcenter.tradestation.com
www.tradestation.com
accountservice.tradestation.com
strategynetwork.tradestation.com
gcs.tradestation.com
clientcenter.tradestation.com
auth.tradestation.com
us-api.tradestation.com
staging.api.tradestation.com
crypto.tradestation.com
www.tradestation.com
jira.tradestation.com
futuresplus.tradestation.com
api.tradestation.com
gainskeeper.qa.tradestation.com
community.tradestation.com
*.tradestation.com
m.tradestation.com
jira.tradestation.com
webtrading.tradestation.com
accountservice.tradestation.com
m.tradestation.com
webtrading.tradestation.com
tradestation.com
api.tradestation.com
*.tradestation.com
owa.tradestation.com
fastlink-api.tradestation.com
strategynetwork.tradestation.com
fatca.tradestation.com
community.tradestation.com
getstarted.tradestation.com
lync.tradestation.com
getstarted.tradestation.com
auth.tradestation.com
webtrading.monex.tradestation.com
getstarted.tradestation.com
sim.api.tradestation.com
ilphoneusers.tradestation.com
auth.stg.tradestation.com
jp-stg-api.tradestation.com
futuresplus.tradestation.com
gainskeeper.tradestation.com
www.tradestation.com
clientcenter.tradestation.com
www.tradestation.com
jp-api.tradestation.com
webclientapi.tradestation.com
sim.api.tradestation.com
jira.tradestation.com
webtrading.monex.tradestation.com
allocations.tradestation.com
eng.webtrading.tradestation.com
signin.tradestation.com
staging.webtrading.tradestation.com
fix.tradestation.com
staging.webtrading.tradestation.com
getstarted.tradestation.com
jp-api.tradestation.com
confluence.tradestation.com
webtrading2.tradestation.com
plugins.tradestation.com
developer.tradestation.com
monex.tradestation.com
accountservice.tradestation.com
ngox-server.tradestation.com
webmail.tradestation.com
monex.tradestation.com
sim.webtrading.menacorp.tradestation.com
*.abs-prod-usva.nite.tradestation.com
ilphoneusers.tradestation.com
learn.tradestation.com
owa.tradestation.com
gainskeeper.qa.tradestation.com
simallocations.tradestation.com
sim.api.tradestation.com
signin.tradestation.com
monex.tradestation.com
acctservices.tradestation.com
confluence.tradestation.com
gainskeeper.tradestation.com
getstarted.tradestation.com
www.shortlocate.tradestation.com
monex.qa.tradestation.com
oos.tradestation.com
webtrading.monex.tradestation.com
webtrading.menacorp.tradestation.com
crypto.tradestation.com
sandbox.tradestation.com
futuresplus.tradestation.com

Certificate

The complete raw certificate details for jp-api.tradestation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvheVc7NN6wVD0AhSRNfT
r2QNs+2zbSI//Lknc+CFKv9W7Xvm5p3uEsr+zJ2s6vj9MSJOUKuEjbHRhHn1EH6n
PjtnD9qavwLG05F8GibYHBYOROq2w3tdVtth9t7KNa4X5F+1H6G1ZzwOY0lgmzyI
ul+h85WISpixMG+qcNmn0jbLCkYEXmi3B8dteyjFREO0VdQvQ4leFGLBcU9L6GVj
rYIodeBWrYxwiOl6MgNdxZ59vsX3psKNCPPoAG/iv+YIXqKG02EsEMNnJlfoCyRv
6WvcJjAw4rDgvRx/Ljht4FoS0Hd0WgC6hvDGIzM7oExM9qu67KyTdHRem3m8YW2T
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19816385639132426432778365129325125795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plantation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TradeStation Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TradeStation Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jp-api.tradestation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23996907547144240602507537593769244675858409608251619490598136003368911211486487607469493142730814561627039420731416976669177511879931088227392362194404863970987075416453706919551947332724832784148777739001669214278344389019855275281115832581179432925678712589315463769809139810363852360286731032545604282986878307555132780746225232636921442009254648088955563789131079443713228396978582957860923679542286502068806434323044856193216672123444329936450853202573712917681578911853330386142391705844032642378361825306300258839985953131807787254114317441589735274199338420962100234863892424141328168105473504763607524414301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							673584270271febca85d1967146c16756ccf501c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-api.tradestation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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