It can be anything! An apex, subdomain, or even a URL.

Results forcrt.rootca2.amazontrust.com

Resolver

Location

A

Name	TTL	Value
crt.rootca2.amazontrust.com	60	13.226.209.27AWS CloudFront (GLOBAL) / Amazon Technologies Inc.
crt.rootca2.amazontrust.com	60	13.226.209.37AWS CloudFront (GLOBAL) / Amazon Technologies Inc.
crt.rootca2.amazontrust.com	60	13.226.209.39AWS CloudFront (GLOBAL) / Amazon Technologies Inc.
crt.rootca2.amazontrust.com	60	13.226.209.86AWS CloudFront (GLOBAL) / Amazon Technologies Inc.