It can be anything! An apex, subdomain, or even a URL.

Results for*.svc.ms.rantec1.o365---lab.ransecurityshn2.myshn.net

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2021-03-04T10:56:17.588	2020-09-10T20:15:21	2021-10-12T20:15:21	rantec1.o365---lab.ransecurityshn2.myshn.net	*.svc.ms.rantec1.o365---lab.ransecurityshn2.myshn.net	C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018
2021-03-04T10:56:17.588	2020-09-10T20:15:21	2021-10-12T20:15:21	rantec1.o365---lab.ransecurityshn2.myshn.net	*.svc.ms.rantec1.o365---lab.ransecurityshn2.myshn.net	C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018
2020-09-10T20:15:25.736	2020-09-10T20:15:21	2021-10-12T20:15:21	rantec1.o365---lab.ransecurityshn2.myshn.net	*.svc.ms.rantec1.o365---lab.ransecurityshn2.myshn.net	C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018
2020-09-10T20:15:25.736	2020-09-10T20:15:21	2021-10-12T20:15:21	rantec1.o365---lab.ransecurityshn2.myshn.net	*.svc.ms.rantec1.o365---lab.ransecurityshn2.myshn.net	C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018