IIS 10 - Https site with wildcard certificate doesn't serve the good certificate (SNI)

Question

I have only two IIS Site :

• subdomain.domain1.com
• subdomain.domain2.com

And two certificates :

• subdomain.domain1.com one standard
• *.domain2.com one wildcard

For some strange reason, the site with the wildcard looks properly configured in both the console and netsh http show sslcert, but when I access the site on any browser, it fails with the error NET::ERR_CERT_COMMON_NAME_INVALID. When I check the certificate, it's indicate subdomain.domain1.com. The other site (subdomain.domain1.com) works perfectly and was created first.

result of netsh http show sslcert :

SSL Certificate bindings:
----------------------------

    IP:Port                      : subdomain.domain1.com:443
    Certificate Hash             : e36cffe0f7a817ca39dca65955a194d83671dd67
    Application ID               : {4dc3e181-e14b-4a21-b022-59fc669b0914}
    Certificate Store Name       : My
    Verify Client Certificate Revocation : Enabled
    Verify Revocation Using Cached Client Certificate Only : Disabled
    Usage Check                  : Enabled
    Revocation Freshness Time    : 0
    URL Retrieval Timeout        : 0
    Ctl Identifier               : (null)
    Ctl Store Name               : (null)
    DS Mapper Usage              : Disabled
    Negotiate Client Certificate : Disabled
    Reject Connections           : Disabled
    Disable HTTP2                : Not Set
    Disable QUIC                 : Not Set
    Disable TLS1.2               : Not Set
    Disable TLS1.3            : Not Set
    Disable OCSP Stapling        : Not Set
    Disable Legacy TLS Versions  : Not Set

    IP:Port                      : subdomain.domain2.com:443
    Certificate Hash             : 7c681697ebed1bd653bb08bcbec5cb719795eb64
    Application ID               : {4dc3e181-e14b-4a21-b022-59fc669b0914}
    Certificate Store Name :     : My
    Verify Client Certificate Revocation : Enabled
    Verify Revocation Using Cached Client Certificate Only : Disabled
    Usage Check                  : Enabled
    Revocation Freshness Time    : 0
    URL Retrieval Timeout        : 0
    Ctl Identifier               : (null)
    Ctl Store Name               : (null)
    DS Mapper Usage              : Disabled
    Negotiate Client Certificate : Disabled
    Reject Connections           : Disabled
    Disable HTTP2                : Not Set
    Disable QUIC                 : Not Set
    Disable TLS1.2               : Not Set
    Disable TLS1.3               : Not Set
    Disable OCSP Stapling        : Not Set
    Disable Legacy TLS Versions  : Not Set

I have no clue why this happened, the SNI checkbox is checked.
I tried, without success to :

• deleting, the binding and recreate it via PowerShell.
• iisreset
• rebooting the server

Update : the bindings from applicationHost.config :

<sites>
    <site name="StrategicWebApiProdSO" id="2" serverAutoStart="true">
        <application path="/" applicationPool="StrategicWebApiProdSO">
            <virtualDirectory path="/" physicalPath="C:\inetpub\StrategicWebApiProdSO" />
        </application>
        <application path="/api" applicationPool="StrategicWebApiProdSO">
            <virtualDirectory path="/" physicalPath="C:\inetpub\StrategicWebApiProdSO\api" />
        </application>
        <bindings>
            <clear />
            <binding protocol="https" bindingInformation="*:443:subdomain.domain1.com" sslFlags="1" />
        </bindings>
        <applicationDefaults enabledProtocols="https" />
    </site>
    <site name="StrategicWebApiProdSI" id="3" serverAutoStart="true">
        <application path="/" applicationPool="StrategicWebApiProdSI">
            <virtualDirectory path="/" physicalPath="C:\inetpub\StrategicWebApiProdSI" />
        </application>
        <application path="/api" applicationPool="StrategicWebApiProdSI">
            <virtualDirectory path="/" physicalPath="C:\inetpub\StrategicWebApiProdSI\api" />
        </application>
        <bindings>
            <clear />
            <binding protocol="https" bindingInformation="*:443:subdomain.domain2.com" sslFlags="1" />
        </bindings>
        <applicationDefaults enabledProtocols="https" />
    </site>
    <siteDefaults>
        <logFile logFormat="W3C" directory="%SystemDrive%\inetpub\logs\LogFiles" />
        <traceFailedRequestsLogging directory="%SystemDrive%\inetpub\logs\FailedReqLogFiles" />
    </siteDefaults>
    <applicationDefaults applicationPool="DefaultAppPool" />
    <virtualDirectoryDefaults allowSubDirConfig="true" />
</sites>

Any clue ? Thx