Likely because your SSL Certificate Friendly Name is the field used for IIS to
determine if it's a Wildcard. If your Common Name is *.domain.com and in the IIS
Edit Site Binding the SSL certificate drop down shows just domain.com then
that's your issue.
Good news is you