Likely because your SSL Certificate Friendly Name is the field used for IIS to determine if it's a Wildcard. If your Common Name is *.domain.com and in the IIS Edit Site Binding the SSL certificate drop down shows just domain.com then that's your issue. Good news is you