It can be anything! An apex, subdomain, or even a URL.

Results for*.media.billing1.com

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2024-08-30T23:26:28.82	2024-08-30T22:27:58	2024-11-28T22:27:57	pornomarket8.store	*.media.billing1.com	C=US, O=Let's Encrypt, CN=R11
2024-08-30T23:26:28.82	2024-08-30T22:27:58	2024-11-28T22:27:57	pornomarket8.store	*.media.billing1.com	C=US, O=Let's Encrypt, CN=R11
2024-08-30T23:26:28.444	2024-08-30T22:27:58	2024-11-28T22:27:57	pornomarket8.store	*.media.billing1.com	C=US, O=Let's Encrypt, CN=R11
2024-08-30T23:26:28.444	2024-08-30T22:27:58	2024-11-28T22:27:57	pornomarket8.store	*.media.billing1.com	C=US, O=Let's Encrypt, CN=R11
2024-08-20T12:00:57.044	2024-08-20T11:02:26	2024-11-18T11:02:25	postofficeind.com	*.media.billing1.com	C=US, O=Let's Encrypt, CN=R10
2024-08-20T12:00:57.044	2024-08-20T11:02:26	2024-11-18T11:02:25	postofficeind.com	*.media.billing1.com	C=US, O=Let's Encrypt, CN=R10
2024-08-20T12:00:56.787	2024-08-20T11:02:26	2024-11-18T11:02:25	postofficeind.com	*.media.billing1.com	C=US, O=Let's Encrypt, CN=R10
2024-08-20T12:00:56.787	2024-08-20T11:02:26	2024-11-18T11:02:25	postofficeind.com	*.media.billing1.com	C=US, O=Let's Encrypt, CN=R10