It can be anything! An apex, subdomain, or even a URL.

Results fortest2.ddcloud.trendmicro.com

Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
2023-04-06T02:13:00.749	2023-04-06T02:13:00	2024-05-06T02:13:00	ddcloud.trendmicro.com	api-internal-test.test2.ddcloud.trendmicro.com	C=US, O="Entrust, Inc.", OU=See www.entrust.net/legal-terms, OU="(c) 2012 Entrust, Inc. - for authorized use only", CN=Entrust Certification Authority - L1K
2020-06-12T09:48:50.95	2020-06-02T06:53:32	2021-06-02T07:23:31	stg.ddcloud.trendmicro.com	*.ddcloud.trendmicro.com	C=US, O="Entrust, Inc.", OU=See www.entrust.net/legal-terms, OU="(c) 2012 Entrust, Inc. - for authorized use only", CN=Entrust Certification Authority - L1K
2020-06-02T07:23:33.968	2020-06-02T06:53:32	2021-06-02T07:23:31	stg.ddcloud.trendmicro.com	*.ddcloud.trendmicro.com	C=US, O="Entrust, Inc.", OU=See www.entrust.net/legal-terms, OU="(c) 2012 Entrust, Inc. - for authorized use only", CN=Entrust Certification Authority - L1K