It can be anything! An apex, subdomain, or even a URL.

Results forwww.hostmaster.xyz.dev

Name	TTL	Value
www.hostmaster.xyz.dev	3600	0 issue "amazon.com "
www.hostmaster.xyz.dev	3600	0 issue "letsencrypt.org "

CAA