It can be anything! An apex, subdomain, or even a URL.

Results forssl-certificate-center-enterprise-thawte-de.verisign.net

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2016-10-01T01:39:34.336	2011-11-12T00:00:00	2013-11-11T23:59:59	SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.DE	ssl-certificate-center-enterprise-thawte-de.verisign.net	C=US, O="thawte, Inc.", OU=Terms of use at https://www.thawte.com/cps (c)06, CN=thawte Extended Validation SSL CA
2016-09-25T13:09:08.88	2013-10-29T00:00:00	2014-09-01T23:59:59	ssl-certificate-center-enterprise.thawte.de	ssl-certificate-center-enterprise-thawte-de.verisign.net	C=US, O="thawte, Inc.", OU=Terms of use at https://www.thawte.com/cps (c)06, CN=thawte Extended Validation SSL CA
2014-12-18T10:09:27.47	2014-04-09T00:00:00	2016-04-08T23:59:59	ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net	ssl-certificate-center-enterprise-thawte-de.verisign.net	C=US, O="thawte, Inc.", OU=Terms of use at https://www.thawte.com/cps (c)06, CN=thawte Extended Validation SSL CA