It can be anything! An apex, subdomain, or even a URL.

Results forpmgrrsl.noc-1.ams1.adm.denic.de

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2019-03-26T09:08:30.923	2019-03-26T08:08:30	2019-06-24T08:08:30	pmgrrsl.noc-1.ams1.adm.denic.de	pmgrrsl.noc-1.ams1.adm.denic.de	C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3
2019-03-26T09:08:30.283	2019-03-26T08:08:30	2019-06-24T08:08:30	pmgrrsl.noc-1.ams1.adm.denic.de	pmgrrsl.noc-1.ams1.adm.denic.de	C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3
2019-03-22T16:05:10.714	2019-03-22T15:05:09	2019-06-20T15:05:09	pmgrrsl.noc-1.ams1.adm.denic.de	pmgrrsl.noc-1.ams1.adm.denic.de	C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3
2019-03-22T16:05:10.019	2019-03-22T15:05:09	2019-06-20T15:05:09	pmgrrsl.noc-1.ams1.adm.denic.de	pmgrrsl.noc-1.ams1.adm.denic.de	C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3