When you have a wildcard cert for *.domain.com and you want to use a SmartPhone 2003 or Pocket PC 2003 client for Server ActiveSync or OMA, it will not work. You will need to disable certificate checking on the device.

More info on the isaserver.org forum.