Yes, it's a ranking factor. Moreover, many browsers show warning if you don't have SSL. I've only found adult sites ranking without an SSL. Most other ranking sites are https. However, it's only a minor ranking signal and Google doesn't kick your site out of SERPs over an SSL certificate.