It can be anything! An apex, subdomain, or even a URL.

Results forssl-certificate-center-enterprise-thawte-fr.verisign.net

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2016-10-02T09:24:11.798	2011-11-12T00:00:00	2013-11-11T23:59:59	SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR	ssl-certificate-center-enterprise-thawte-fr.verisign.net	C=US, O="thawte, Inc.", OU=Terms of use at https://www.thawte.com/cps (c)06, CN=thawte Extended Validation SSL CA
2016-10-02T06:38:28.488	2014-04-09T00:00:00	2016-04-08T23:59:59	ssl-certificate-center-enterprise.thawte.fr	ssl-certificate-center-enterprise-thawte-fr.verisign.net	C=US, O="thawte, Inc.", OU=Terms of use at https://www.thawte.com/cps (c)06, CN=thawte Extended Validation SSL CA
2016-09-25T18:38:07.841	2013-10-29T00:00:00	2014-09-01T23:59:59	ssl-certificate-center-enterprise.thawte.fr	ssl-certificate-center-enterprise-thawte-fr.verisign.net	C=US, O="thawte, Inc.", OU=Terms of use at https://www.thawte.com/cps (c)06, CN=thawte Extended Validation SSL CA