It can be anything! An apex, subdomain, or even a URL.

Results for*.reporting.vip.symantec.com

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2020-03-16T17:47:20.323	2020-01-29T00:00:00	2022-01-29T12:00:00	reporting.vip.symantec.com	*.reporting.vip.symantec.com	C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA
2020-03-16T17:47:20.323	2020-01-29T00:00:00	2022-01-29T12:00:00	reporting.vip.symantec.com	*.reporting.vip.symantec.com	C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA
2020-01-29T20:28:12.248	2020-01-29T00:00:00	2022-01-29T12:00:00	reporting.vip.symantec.com	*.reporting.vip.symantec.com	C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA
2020-01-29T20:28:12.248	2020-01-29T00:00:00	2022-01-29T12:00:00	reporting.vip.symantec.com	*.reporting.vip.symantec.com	C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA