It can be anything! An apex, subdomain, or even a URL.

Results for*.ddd.vc

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2020-08-08T19:17:41.172	2020-08-08T00:00:00	2021-08-08T12:00:00	sni.cloudflaressl.com	*.ddd.vc	C=US, O="Cloudflare, Inc.", CN=Cloudflare Inc ECC CA-3
2020-08-08T19:17:41.172	2020-08-08T00:00:00	2021-08-08T12:00:00	sni.cloudflaressl.com	*.ddd.vc	C=US, O="Cloudflare, Inc.", CN=Cloudflare Inc ECC CA-3
2020-03-03T16:33:41.236	2020-03-03T00:00:00	2020-10-09T12:00:00	sni.cloudflaressl.com	*.ddd.vc	C=US, ST=CA, L=San Francisco, O="CloudFlare, Inc.", CN=CloudFlare Inc ECC CA-2
2020-03-03T16:33:41.236	2020-03-03T00:00:00	2020-10-09T12:00:00	sni.cloudflaressl.com	*.ddd.vc	C=US, ST=CA, L=San Francisco, O="CloudFlare, Inc.", CN=CloudFlare Inc ECC CA-2