It can be anything! An apex, subdomain, or even a URL.

Results for*.stage01.verticalresponse.com

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2020-01-30T09:14:39.192	2020-01-30T00:00:00	2022-01-29T23:59:59	stage01p0.verticalresponse.com	*.stage01.verticalresponse.com	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
2020-01-30T09:14:39.192	2020-01-30T00:00:00	2022-01-29T23:59:59	stage01p0.verticalresponse.com	*.stage01.verticalresponse.com	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
2020-01-30T09:14:20.301	2020-01-30T00:00:00	2022-01-29T23:59:59	stage01p0.verticalresponse.com	*.stage01.verticalresponse.com	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
2020-01-30T09:14:20.301	2020-01-30T00:00:00	2022-01-29T23:59:59	stage01p0.verticalresponse.com	*.stage01.verticalresponse.com	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA