It can be anything! An apex, subdomain, or even a URL.

Results for*.test.tenantcloud.com

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2016-07-21T12:35:19.77	2016-07-18T00:00:00	2019-07-18T23:59:59	*.test.tenantcloud.com	*.test.tenantcloud.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA
2016-07-21T12:35:19.77	2016-07-18T00:00:00	2019-07-18T23:59:59	*.test.tenantcloud.com	*.test.tenantcloud.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA
2015-07-18T13:08:55.819	2015-07-13T00:00:00	2016-07-12T23:59:59	*.test.tenantcloud.com	*.test.tenantcloud.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA
2015-07-18T13:08:55.819	2015-07-13T00:00:00	2016-07-12T23:59:59	*.test.tenantcloud.com	*.test.tenantcloud.com	C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA