It can be anything! An apex, subdomain, or even a URL.

Results for*.101troll.com

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2018-03-29T17:56:50.574	2018-03-27T00:00:00	2018-10-03T23:59:59	sni251480.cloudflaressl.com	*.101troll.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Domain Validation Secure Server CA 2
2018-03-29T17:56:50.574	2018-03-27T00:00:00	2018-10-03T23:59:59	sni251480.cloudflaressl.com	*.101troll.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Domain Validation Secure Server CA 2
2018-03-27T17:49:14.467	2018-03-27T00:00:00	2018-10-03T23:59:59	sni251480.cloudflaressl.com	*.101troll.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Domain Validation Secure Server CA 2
2018-03-27T17:49:14.467	2018-03-27T00:00:00	2018-10-03T23:59:59	sni251480.cloudflaressl.com	*.101troll.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Domain Validation Secure Server CA 2