Version: v3 Serial Number: 10608622115303773342507784350356890101 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc CommonName: DigiCert Global G2 TLS RSA SHA256 2020 CA1 Validity: Not Before: 2024-10-02 00:00 UTC Not After : 2025-11-02 23:59 UTC Subject: Country: US Province: California Locality: San Francisco Organization: Salesforce, Inc. CommonName: view.em.culligan.com Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: 74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17 Subject Key Identifier: F9:B9:BE:84:D0:3F:9F:09:F5:6A:F6:84:D5:87:76:F0:D1:A2:39:42 CRL Distribution Points: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.digicert.com Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: view.em.culligan.com Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 422860113693008382627098250342169347672462 Signature Algorithm: ECDSA-SHA384 Issuer: Country: US Organization: Let's Encrypt CommonName: E6 Validity: Not Before: 2024-10-20 10:22 UTC Not After : 2025-01-18 10:22 UTC Subject: CommonName: culligan.com Subject Public Key Info: Public Key Algorithm: ECDSA Public Key: E2:36:EA:64:97:30:63:D6:DD:9F:CA:DF:3D:E3:F2:F1: 78:97:59:60:BD:20:D4:B8:1F:A9:C0:8E:62:EA:D7:22: 9D:6D:E9:B6:D7:17:DF:4E:EB:F3:5F:5C:A8:F0:09:03: 70:DA:EF:2A:37:7A:78:40:62:4B:4B:34:A9:81:98:58 Authority Key Identifier: 93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2 Subject Key Identifier: D7:97:62:A1:B8:E4:7F:B3:00:37:57:26:33:D9:74:0E:C1:7A:9D:6B Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://e6.o.lencr.org Issuing Certificate URL: http://e6.i.lencr.org/ Key Usage: Digital Signature Extended Key Usage: Server Auth Client Auth DNS Names: culligan.com www.culligan.com Certificate Signature Algorithm: ECDSA-SHA384 Certificate Signature: 30:64:02:30:2F:6E:C2:6F:71:08:7D:E6:3C:53:41:3F: E9:71:68:1A:AE:6F:D3:8C:AE:F3:9D:29:42:92:60:DA: BC:67:1A:75:9F:CD:6A:70:4F:F0:AD:C4:E9:9B:58:8D: 08:AE:14:B8:02:30:0D:78:76:E5:93:E8:E3:2D:E3:7E: 80:C3:F9:51:FA:00:D5:9B:A5:B7:90:11:97:E9:BB:E0: 56:82:B2:66:E6:25:1E:78:7D:BB:7F:A4:B2:EA:3A:50: 36:01:04:E8:E4:56

Version: v3 Serial Number: 7923356978478168095551637725898788583 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc CommonName: DigiCert Global G2 TLS RSA SHA256 2020 CA1 Validity: Not Before: 2024-10-02 00:00 UTC Not After : 2025-11-02 23:59 UTC Subject: Country: US Province: California Locality: San Francisco Organization: Salesforce, Inc. CommonName: click.em.culligan.com Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: 74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17 Subject Key Identifier: 68:22:C4:78:0F:93:1D:31:97:B5:75:F1:46:D0:98:ED:AE:6E:65:DD CRL Distribution Points: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.digicert.com Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: click.em.culligan.com Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 367718936611470770794080314547127154399237 Signature Algorithm: ECDSA-SHA384 Issuer: Country: US Organization: Let's Encrypt CommonName: E6 Validity: Not Before: 2024-08-19 11:20 UTC Not After : 2024-11-17 11:20 UTC Subject: CommonName: culligan.com Subject Public Key Info: Public Key Algorithm: ECDSA Public Key: 85:11:48:29:E0:24:13:24:5A:E5:33:A6:01:04:57:6D: 54:38:25:8E:42:2D:BD:2D:8B:88:8E:DB:D4:EF:25:68: 1A:11:B5:34:7F:35:98:3F:43:77:02:E2:10:84:6A:64: BC:4D:B4:EB:54:E2:F3:46:B2:83:A9:30:3D:8A:2D:D2 Authority Key Identifier: 93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2 Subject Key Identifier: BE:6D:20:A5:DC:CC:79:95:34:51:7C:01:9A:6A:E1:1D:6E:58:3F:0C Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://e6.o.lencr.org Issuing Certificate URL: http://e6.i.lencr.org/ Key Usage: Digital Signature Extended Key Usage: Server Auth Client Auth DNS Names: culligan.com www.culligan.com Certificate Signature Algorithm: ECDSA-SHA384 Certificate Signature: 30:66:02:31:00:DB:A6:C3:46:16:1D:71:7B:9B:22:2C: A7:B2:0F:17:24:A5:D5:78:11:7D:B9:0B:66:ED:C3:0B: 33:05:9A:8C:8E:B2:CD:95:C5:0E:DA:07:96:FA:02:A8: 74:F3:3F:91:8E:02:31:00:D4:CE:61:7A:0A:DF:A5:39: 66:A9:4F:0E:A5:C7:02:E3:E2:43:80:5A:01:70:2E:2C: AE:84:35:08:7E:8E:FE:12:A7:5A:21:4D:B8:AD:CA:AC: 8F:82:5F:BB:40:57:04:F9

Version: v3 Serial Number: 2065012702120222967 Signature Algorithm: SHA256-RSA Issuer: Country: US Province: Arizona Locality: Scottsdale Organization: GoDaddy.com, Inc. Organizational Unit: http://certs.godaddy.com/repository/ CommonName: Go Daddy Secure Certificate Authority - G2 Validity: Not Before: 2023-09-06 16:14 UTC Not After : 2024-09-06 16:14 UTC Subject: CommonName: securemail.culligan.com Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: 40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE Subject Key Identifier: 82:EA:FA:6A:E2:2B:FD:D0:A3:E1:A0:9E:69:B2:FA:66:E1:D4:6F:2B CRL Distribution Points: http://crl.godaddy.com/gdig2s1-8861.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.godaddy.com/ Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: securemail.culligan.com www.securemail.culligan.com Certificate Signature Algorithm: SHA256-RSA Certificate Signature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