It can be anything! An apex, subdomain, or even a URL.

Results for*.globalsigncdn.com

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2018-05-24T13:54:33.585	2018-05-24T00:00:00	2019-03-21T23:59:59	ssl880695.cloudflaressl.com	*.globalsigncdn.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Domain Validation Legacy Server CA 2
2018-05-24T13:54:33.585	2018-05-24T00:00:00	2019-03-21T23:59:59	ssl880695.cloudflaressl.com	*.globalsigncdn.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Domain Validation Legacy Server CA 2
2018-05-24T13:54:03.408	2018-05-24T00:00:00	2019-03-21T23:59:59	ssl880695.cloudflaressl.com	*.globalsigncdn.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Domain Validation Legacy Server CA 2
2018-05-24T13:54:03.408	2018-05-24T00:00:00	2019-03-21T23:59:59	ssl880695.cloudflaressl.com	*.globalsigncdn.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Domain Validation Legacy Server CA 2