It can be anything! An apex, subdomain, or even a URL.

Results forcrl.rootca2.amazontrust.com

Resolver

Location

A

Name	TTL	Value
crl.rootca2.amazontrust.com	60	13.226.209.7AWS CloudFront (GLOBAL) / Amazon Technologies Inc.
crl.rootca2.amazontrust.com	60	13.226.209.59AWS CloudFront (GLOBAL) / Amazon Technologies Inc.
crl.rootca2.amazontrust.com	60	13.226.209.109AWS CloudFront (GLOBAL) / Amazon Technologies Inc.
crl.rootca2.amazontrust.com	60	13.226.209.125AWS CloudFront (GLOBAL) / Amazon Technologies Inc.