It can be anything! An apex, subdomain, or even a URL.

Results fordiscovery.sa.archive.veritas.com

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2017-09-14T22:00:09.568	2017-09-12T00:00:00	2018-09-13T23:59:59	personal.sa.archive.veritas.com	discovery.sa.archive.veritas.com	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G3
2017-09-12T12:57:15.495	2017-09-12T00:00:00	2018-09-13T23:59:59	personal.sa.archive.veritas.com	discovery.sa.archive.veritas.com	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G3
2016-09-30T13:11:46.183	2016-09-13T00:00:00	2017-09-14T23:59:59	personal.sa.archive.veritas.com	discovery.sa.archive.veritas.com	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G3
2016-09-13T21:08:15.751	2016-09-13T00:00:00	2017-09-14T23:59:59	personal.sa.archive.veritas.com	discovery.sa.archive.veritas.com	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G3
2015-11-15T16:07:18.392	2015-10-08T00:00:00	2016-10-08T23:59:59	personal.sa.archive.veritas.com	discovery.sa.archive.veritas.com	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4